[
  {
    "_id": "Winlogbeat-Dashboard",
    "_type": "dashboard",
    "_source": {
      "title": "Winlogbeat Dashboard",
      "hits": 0,
      "description": "",
      "panelsJSON": "[{\"col\":1,\"id\":\"Number-of-Events\",\"panelIndex\":3,\"row\":1,\"size_x\":3,\"size_y\":4,\"type\":\"visualization\"},{\"col\":4,\"id\":\"Number-of-Events-Over-Time-By-Event-Log\",\"panelIndex\":1,\"row\":1,\"size_x\":9,\"size_y\":4,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Sources\",\"panelIndex\":6,\"row\":5,\"size_x\":4,\"size_y\":4,\"type\":\"visualization\"},{\"col\":5,\"columns\":[\"computer_name\",\"log_name\",\"source_name\",\"message\"],\"id\":\"Events-Details\",\"panelIndex\":7,\"row\":5,\"size_x\":6,\"size_y\":7,\"sort\":[\"@timestamp\",\"desc\"],\"type\":\"search\"},{\"col\":11,\"id\":\"Event-Count-By-Computer\",\"panelIndex\":8,\"row\":5,\"size_x\":2,\"size_y\":2,\"type\":\"visualization\"},{\"id\":\"Event-Count-By-Level\",\"type\":\"visualization\",\"panelIndex\":9,\"size_x\":2,\"size_y\":2,\"col\":11,\"row\":7}]",
      "optionsJSON": "{\"darkTheme\":false}",
      "uiStateJSON": "{}",
      "version": 1,
      "timeRestore": false,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"index\":\"winlog*\",\"key\":\"event_id\",\"negate\":true,\"value\":\"10,028\"},\"query\":{\"match\":{\"event_id\":{\"query\":10028,\"type\":\"phrase\"}}}},{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}]}"
      }
    }
  },
  {
    "_id": "Lab-Core-Infrastructure-Events-Dashboard",
    "_type": "dashboard",
    "_source": {
      "title": "Lab - Core Infrastructure Events Dashboard",
      "hits": 0,
      "description": "",
      "panelsJSON": "[{\"col\":1,\"id\":\"Lab-Core-Infrastructure-Events-By-Source\",\"panelIndex\":1,\"row\":1,\"size_x\":6,\"size_y\":4,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Lab-Core-Infrastructure-Events-By-Computer\",\"panelIndex\":2,\"row\":1,\"size_x\":6,\"size_y\":4,\"type\":\"visualization\"},{\"col\":1,\"columns\":[\"computer_name\",\"log_name\",\"source_name\",\"level\",\"message\"],\"id\":\"Lab-Core-Infrastructure-Events\",\"panelIndex\":3,\"row\":5,\"size_x\":12,\"size_y\":7,\"sort\":[\"@timestamp\",\"desc\"],\"type\":\"search\"}]",
      "optionsJSON": "{\"darkTheme\":false}",
      "uiStateJSON": "{}",
      "version": 1,
      "timeRestore": false,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}]}"
      }
    }
  },
  {
    "_id": "Production-RDS-Infrastructure-Events-Dashboard",
    "_type": "dashboard",
    "_source": {
      "title": "Production - RDS Infrastructure Events Dashboard",
      "hits": 0,
      "description": "",
      "panelsJSON": "[{\"col\":1,\"id\":\"Production-RDS-Infrastructure-Events-By-Source\",\"panelIndex\":1,\"row\":1,\"size_x\":4,\"size_y\":4,\"type\":\"visualization\"},{\"col\":5,\"id\":\"Production-RDS-Infrastructure-Events-By-Computer\",\"panelIndex\":2,\"row\":1,\"size_x\":4,\"size_y\":4,\"type\":\"visualization\"},{\"col\":9,\"id\":\"Production-RDS-Infrastructure-Events-By-Id\",\"panelIndex\":4,\"row\":1,\"size_x\":4,\"size_y\":4,\"type\":\"visualization\"},{\"col\":1,\"columns\":[\"computer_name\",\"log_name\",\"source_name\",\"level\",\"message\"],\"id\":\"Production-RDS-Infrastructure-Events\",\"panelIndex\":3,\"row\":5,\"size_x\":8,\"size_y\":8,\"sort\":[\"@timestamp\",\"desc\"],\"type\":\"search\"},{\"id\":\"Production-RDS-Infrastructure-Events-By-Level\",\"type\":\"visualization\",\"panelIndex\":5,\"size_x\":4,\"size_y\":4,\"col\":9,\"row\":5}]",
      "optionsJSON": "{\"darkTheme\":false}",
      "uiStateJSON": "{}",
      "version": 1,
      "timeRestore": false,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}}}]}"
      }
    }
  },
  {
    "_id": "Dev-SQL-Infrastructure-Events-Dashboard",
    "_type": "dashboard",
    "_source": {
      "title": "Dev - SQL Infrastructure Events Dashboard",
      "hits": 0,
      "description": "",
      "panelsJSON": "[\n  {\n    \"col\": 1,\n    \"id\": \"Dev-SQL-Infrastructure-Events-By-Source\",\n    \"panelIndex\": 1,\n    \"row\": 1,\n    \"size_x\": 4,\n    \"size_y\": 5,\n    \"type\": \"visualization\"\n  },\n  {\n    \"col\": 5,\n    \"id\": \"Dev-SQL-Infrastructure-Events-By-Computer\",\n    \"panelIndex\": 3,\n    \"row\": 1,\n    \"size_x\": 4,\n    \"size_y\": 5,\n    \"type\": \"visualization\"\n  },\n  {\n    \"col\": 9,\n    \"id\": \"Dev-SQL-Infrastructure-Events-By-Level\",\n    \"panelIndex\": 4,\n    \"row\": 1,\n    \"size_x\": 4,\n    \"size_y\": 5,\n    \"type\": \"visualization\"\n  },\n  {\n    \"col\": 1,\n    \"columns\": [\n      \"computer_name\",\n      \"log_name\",\n      \"source_name\",\n      \"event_id\",\n      \"level\",\n      \"message\"\n    ],\n    \"id\": \"Dev-SQL-Infrastructure-Events\",\n    \"panelIndex\": 2,\n    \"row\": 6,\n    \"size_x\": 12,\n    \"size_y\": 8,\n    \"sort\": [\n      \"@timestamp\",\n      \"desc\"\n    ],\n    \"type\": \"search\"\n  }\n]",
      "optionsJSON": "{\n  \"darkTheme\": false\n}",
      "uiStateJSON": "{\n  \"P-4\": {\n    \"vis\": {\n      \"colors\": {\n        \"Critical\": \"#0A437C\",\n        \"Error\": \"#E0752D\",\n        \"Warning\": \"#F2C96D\"\n      }\n    }\n  }\n}",
      "version": 1,
      "timeRestore": false,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"filter\": [\n    {\n      \"query\": {\n        \"query_string\": {\n          \"analyze_wildcard\": true,\n          \"query\": \"*\"\n        }\n      }\n    }\n  ]\n}"
      }
    }
  },
  {
    "_id": "QA-SQL-Infrastructure-Events-Dashboard",
    "_type": "dashboard",
    "_source": {
      "title": "QA - SQL Infrastructure Events Dashboard",
      "hits": 0,
      "description": "",
      "panelsJSON": "[{\"col\":1,\"id\":\"QA-SQL-Infrastructure-Events-By-Source\",\"panelIndex\":1,\"row\":1,\"size_x\":4,\"size_y\":5,\"type\":\"visualization\"},{\"col\":5,\"id\":\"QA-SQL-Infrastructure-Events-By-Computer\",\"panelIndex\":3,\"row\":1,\"size_x\":4,\"size_y\":5,\"type\":\"visualization\"},{\"col\":9,\"id\":\"QA-SQL-Infrastructure-Events-By-Level\",\"panelIndex\":4,\"row\":1,\"size_x\":4,\"size_y\":5,\"type\":\"visualization\"},{\"col\":1,\"columns\":[\"computer_name\",\"log_name\",\"source_name\",\"event_id\",\"level\",\"message\"],\"id\":\"QA-SQL-Infrastructure-Events\",\"panelIndex\":2,\"row\":6,\"size_x\":12,\"size_y\":8,\"sort\":[\"@timestamp\",\"desc\"],\"type\":\"search\"}]",
      "optionsJSON": "{\"darkTheme\":false}",
      "uiStateJSON": "{\"P-4\":{\"vis\":{\"colors\":{\"Critical\":\"#0A437C\",\"Error\":\"#E0752D\",\"Warning\":\"#F2C96D\"}}}}",
      "version": 1,
      "timeRestore": false,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}]}"
      }
    }
  },
  {
    "_id": "Curated-Incidents",
    "_type": "dashboard",
    "_source": {
      "title": "Curated Incidents",
      "hits": 0,
      "description": "",
      "panelsJSON": "[{\"col\":1,\"id\":\"Incidents-by-Category\",\"panelIndex\":1,\"row\":1,\"size_x\":12,\"size_y\":4,\"type\":\"visualization\"},{\"id\":\"Curated-Incidents\",\"type\":\"search\",\"panelIndex\":2,\"size_x\":12,\"size_y\":8,\"col\":1,\"row\":5,\"columns\":[\"category\",\"requesttitle\",\"severityweight\"],\"sort\":[\"dateentered\",\"desc\"]}]",
      "optionsJSON": "{\"darkTheme\":false}",
      "uiStateJSON": "{\"P-1\":{\"spy\":{\"mode\":{\"name\":null,\"fill\":false}}}}",
      "version": 1,
      "timeRestore": false,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[{\"meta\":{\"index\":\"c2*\",\"negate\":true,\"key\":\"category\",\"value\":\"C2\",\"disabled\":false,\"alias\":null},\"query\":{\"match\":{\"category\":{\"query\":\"C2\",\"type\":\"phrase\"}}},\"$state\":{\"store\":\"appState\"}},{\"meta\":{\"index\":\"c2*\",\"negate\":true,\"key\":\"category\",\"value\":\"Lecteur de carte\",\"disabled\":false,\"alias\":null},\"query\":{\"match\":{\"category\":{\"query\":\"Lecteur de carte\",\"type\":\"phrase\"}}},\"$state\":{\"store\":\"appState\"}},{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}]}"
      }
    }
  },
  {
    "_id": "Production-SQL-Infrastructure-Events-Dashboard",
    "_type": "dashboard",
    "_source": {
      "title": "Production - SQL Infrastructure Events Dashboard",
      "hits": 0,
      "description": "",
      "panelsJSON": "[\n  {\n    \"col\": 1,\n    \"id\": \"Production-SQL-Infrastructure-Events-By-Source\",\n    \"panelIndex\": 1,\n    \"row\": 1,\n    \"size_x\": 4,\n    \"size_y\": 5,\n    \"type\": \"visualization\"\n  },\n  {\n    \"col\": 5,\n    \"id\": \"Production-SQL-Infrastructure-Events-By-Computer\",\n    \"panelIndex\": 3,\n    \"row\": 1,\n    \"size_x\": 4,\n    \"size_y\": 5,\n    \"type\": \"visualization\"\n  },\n  {\n    \"col\": 9,\n    \"id\": \"Production-SQL-Infrastructure-Events-By-Level\",\n    \"panelIndex\": 4,\n    \"row\": 1,\n    \"size_x\": 4,\n    \"size_y\": 5,\n    \"type\": \"visualization\"\n  },\n  {\n    \"col\": 1,\n    \"columns\": [\n      \"computer_name\",\n      \"log_name\",\n      \"source_name\",\n      \"event_id\",\n      \"level\",\n      \"message\"\n    ],\n    \"id\": \"Production-SQL-Infrastructure-Events\",\n    \"panelIndex\": 2,\n    \"row\": 6,\n    \"size_x\": 12,\n    \"size_y\": 8,\n    \"sort\": [\n      \"@timestamp\",\n      \"desc\"\n    ],\n    \"type\": \"search\"\n  }\n]",
      "optionsJSON": "{\n  \"darkTheme\": false\n}",
      "uiStateJSON": "{\n  \"P-4\": {\n    \"vis\": {\n      \"colors\": {\n        \"Critical\": \"#0A437C\",\n        \"Error\": \"#E0752D\",\n        \"Warning\": \"#F2C96D\"\n      }\n    }\n  }\n}",
      "version": 1,
      "timeRestore": false,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"filter\": [\n    {\n      \"query\": {\n        \"query_string\": {\n          \"analyze_wildcard\": true,\n          \"query\": \"*\"\n        }\n      }\n    }\n  ]\n}"
      }
    }
  },
  {
    "_id": "Production-Exchange-Infrastructure-Events-Dashboard",
    "_type": "dashboard",
    "_source": {
      "title": "Production - Exchange Infrastructure Events Dashboard",
      "hits": 0,
      "description": "",
      "panelsJSON": "[{\"col\":1,\"id\":\"Production-Exchange-Events-By-Computer\",\"panelIndex\":1,\"row\":1,\"size_x\":4,\"size_y\":5,\"type\":\"visualization\"},{\"col\":5,\"id\":\"Production-Exchange-Infrastructure-Events-By-Source\",\"panelIndex\":3,\"row\":1,\"size_x\":4,\"size_y\":5,\"type\":\"visualization\"},{\"col\":9,\"id\":\"Production-Exchange-Infrastructure-Events-By-Event-ID\",\"panelIndex\":4,\"row\":1,\"size_x\":4,\"size_y\":5,\"type\":\"visualization\"},{\"col\":1,\"columns\":[\"computer_name\",\"log_name\",\"source_name\",\"event_id\",\"level\",\"message\"],\"id\":\"Production-Exchange-Infrastructure-Events\",\"panelIndex\":2,\"row\":6,\"size_x\":12,\"size_y\":7,\"sort\":[\"@timestamp\",\"desc\"],\"type\":\"search\"}]",
      "optionsJSON": "{\"darkTheme\":false}",
      "uiStateJSON": "{}",
      "version": 1,
      "timeRestore": false,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}]}"
      }
    }
  },
  {
    "_id": "Production-File-Server-Events-Dashboard",
    "_type": "dashboard",
    "_source": {
      "title": "Production - File Server Events Dashboard",
      "hits": 0,
      "description": "",
      "panelsJSON": "[{\"id\":\"Production-File-Server-Events-By-Computer\",\"type\":\"visualization\",\"panelIndex\":2,\"size_x\":4,\"size_y\":4,\"col\":1,\"row\":1},{\"id\":\"Production-File-Server-Events-By-Id\",\"type\":\"visualization\",\"panelIndex\":3,\"size_x\":4,\"size_y\":4,\"col\":5,\"row\":1},{\"id\":\"Production-File-Server-Events-By-Source\",\"type\":\"visualization\",\"panelIndex\":4,\"size_x\":4,\"size_y\":4,\"col\":9,\"row\":1},{\"id\":\"Production-File-Server-Events\",\"type\":\"search\",\"panelIndex\":5,\"size_x\":12,\"size_y\":8,\"col\":1,\"row\":5,\"columns\":[\"computer_name\",\"log_name\",\"source_name\",\"event_id\",\"level\",\"message\"],\"sort\":[\"@timestamp\",\"desc\"]}]",
      "optionsJSON": "{\"darkTheme\":false}",
      "uiStateJSON": "{\"P-2\":{\"vis\":{\"colors\":{\"WIN140.contoso.com\":\"#3F6833\"}}}}",
      "version": 1,
      "timeRestore": false,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}}}]}"
      }
    }
  },
  {
    "_id": "Production-Core-Infrastructure-Events-Dashboard",
    "_type": "dashboard",
    "_source": {
      "title": "Production - Core Infrastructure Events Dashboard",
      "hits": 0,
      "description": "",
      "panelsJSON": "[{\"col\":1,\"id\":\"Production-Core-Infrastructure-Events-By-Computer\",\"panelIndex\":2,\"row\":1,\"size_x\":4,\"size_y\":4,\"type\":\"visualization\"},{\"col\":5,\"id\":\"Production-Core-Infrastructure-Events-By-Source\",\"panelIndex\":1,\"row\":1,\"size_x\":4,\"size_y\":4,\"type\":\"visualization\"},{\"col\":9,\"id\":\"Production-Core-Infrastructure-Events-By-Id\",\"panelIndex\":4,\"row\":3,\"size_x\":4,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"columns\":[\"computer_name\",\"log_name\",\"source_name\",\"event_id\",\"level\",\"message\"],\"id\":\"Production-Core-Infrastructure-Events\",\"panelIndex\":5,\"row\":5,\"size_x\":12,\"size_y\":8,\"sort\":[\"@timestamp\",\"desc\"],\"type\":\"search\"},{\"id\":\"Production-Core-Infrastructure-Events-By-Level\",\"type\":\"visualization\",\"panelIndex\":6,\"size_x\":4,\"size_y\":2,\"col\":9,\"row\":1}]",
      "optionsJSON": "{\"darkTheme\":false}",
      "uiStateJSON": "{}",
      "version": 1,
      "timeRestore": false,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}}}]}"
      }
    }
  },
  {
    "_id": "Production-SharePoint-Events-Dashboard",
    "_type": "dashboard",
    "_source": {
      "title": "Production - SharePoint Events Dashboard",
      "hits": 0,
      "description": "",
      "panelsJSON": "[{\"col\":1,\"id\":\"Production-SharePoint-Events-By-Computer\",\"panelIndex\":1,\"row\":1,\"size_x\":4,\"size_y\":4,\"type\":\"visualization\"},{\"col\":5,\"id\":\"Production-SharePoint-Events-By-Source\",\"panelIndex\":3,\"row\":1,\"size_x\":4,\"size_y\":4,\"type\":\"visualization\"},{\"col\":9,\"id\":\"Production-SharePoint-Events-By-Level\",\"panelIndex\":2,\"row\":1,\"size_x\":4,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"columns\":[\"computer_name\",\"log_name\",\"source_name\",\"event_id\",\"level\",\"message\"],\"id\":\"Production-SharePoint-Infrastructure-Events\",\"panelIndex\":4,\"row\":5,\"size_x\":12,\"size_y\":8,\"sort\":[\"@timestamp\",\"desc\"],\"type\":\"search\"},{\"id\":\"Production-SharePoint-Events-By-Id\",\"type\":\"visualization\",\"panelIndex\":5,\"size_x\":4,\"size_y\":2,\"col\":9,\"row\":3}]",
      "optionsJSON": "{\"darkTheme\":false}",
      "uiStateJSON": "{}",
      "version": 1,
      "timeRestore": false,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}]}"
      }
    }
  },
  {
    "_id": "All-System-Center-Operations-Manager-Events-Dashboard",
    "_type": "dashboard",
    "_source": {
      "title": "All - System Center Operations Manager Events Dashboard",
      "hits": 0,
      "description": "",
      "panelsJSON": "[{\"id\":\"All-System-Center-Operations-Manager-Events-By-Computer\",\"type\":\"visualization\",\"panelIndex\":1,\"size_x\":3,\"size_y\":4,\"col\":1,\"row\":1},{\"id\":\"All-System-Center-Operations-Manager-Events-By-Source\",\"type\":\"visualization\",\"panelIndex\":3,\"size_x\":4,\"size_y\":4,\"col\":4,\"row\":1},{\"id\":\"All-System-Center-Operations-Manager-Events-By-Health-Module\",\"type\":\"visualization\",\"panelIndex\":2,\"size_x\":5,\"size_y\":4,\"col\":8,\"row\":1},{\"id\":\"All-System-Center-Operations-Manager-Events\",\"type\":\"search\",\"panelIndex\":4,\"size_x\":12,\"size_y\":8,\"col\":1,\"row\":5,\"columns\":[\"_source\"],\"sort\":[\"@timestamp\",\"desc\"]}]",
      "optionsJSON": "{\"darkTheme\":false}",
      "uiStateJSON": "{}",
      "version": 1,
      "timeRestore": false,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}}}]}"
      }
    }
  },
  {
    "_id": "QA-Active-Directory-Events-Dashboard",
    "_type": "dashboard",
    "_source": {
      "title": "QA - Active Directory Events Dashboard",
      "hits": 0,
      "description": "",
      "panelsJSON": "[{\"col\":1,\"id\":\"QA-Active-Directory-Events-Per-Computer\",\"panelIndex\":3,\"row\":1,\"size_x\":4,\"size_y\":4,\"type\":\"visualization\"},{\"col\":5,\"id\":\"QA-Active-Directory-Events-By-Source\",\"panelIndex\":2,\"row\":1,\"size_x\":4,\"size_y\":4,\"type\":\"visualization\"},{\"col\":9,\"id\":\"QA-Active-Directory-Events-By-Level\",\"panelIndex\":1,\"row\":1,\"size_x\":4,\"size_y\":4,\"type\":\"visualization\"},{\"col\":1,\"columns\":[\"computer_name\",\"log_name\",\"source_name\",\"event_id\",\"level\",\"message\"],\"id\":\"QA-Active-Directory-Events\",\"panelIndex\":4,\"row\":5,\"size_x\":12,\"size_y\":8,\"sort\":[\"@timestamp\",\"desc\"],\"type\":\"search\"}]",
      "optionsJSON": "{\"darkTheme\":false}",
      "uiStateJSON": "{}",
      "version": 1,
      "timeRestore": false,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}]}"
      }
    }
  },
  {
    "_id": "Production-SharePoint-ULS-Events-Dashboard",
    "_type": "dashboard",
    "_source": {
      "title": "Production - SharePoint ULS Events Dashboard",
      "hits": 0,
      "description": "",
      "panelsJSON": "[{\"col\":9,\"id\":\"Production-SharePoint-ULS-Events-By-Category\",\"panelIndex\":1,\"row\":1,\"size_x\":4,\"size_y\":4,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Production-SharePoint-ULS-Events-By-Computer\",\"panelIndex\":3,\"row\":1,\"size_x\":4,\"size_y\":4,\"type\":\"visualization\"},{\"col\":1,\"columns\":[\"_source\"],\"id\":\"Production-SharePoint-ULS-Events\",\"panelIndex\":2,\"row\":5,\"size_x\":12,\"size_y\":8,\"sort\":[\"timestamp\",\"desc\"],\"type\":\"search\"},{\"id\":\"Production-SharePoint-ULS-Event-By-Area\",\"type\":\"visualization\",\"panelIndex\":4,\"size_x\":4,\"size_y\":4,\"col\":5,\"row\":1}]",
      "optionsJSON": "{\"darkTheme\":false}",
      "uiStateJSON": "{}",
      "version": 1,
      "timeRestore": false,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}]}"
      }
    }
  },
  {
    "_id": "WMI-Events-Dashboard",
    "_type": "dashboard",
    "_source": {
      "title": "WMI Events Dashboard",
      "hits": 0,
      "description": "",
      "panelsJSON": "[{\"col\":1,\"id\":\"WMI-Events-By-Computer\",\"panelIndex\":1,\"row\":1,\"size_x\":3,\"size_y\":4,\"type\":\"visualization\"},{\"col\":4,\"id\":\"WMI-Events-By-Level\",\"panelIndex\":3,\"row\":1,\"size_x\":3,\"size_y\":4,\"type\":\"visualization\"},{\"col\":7,\"id\":\"WMI-Events-By-Provider\",\"panelIndex\":4,\"row\":1,\"size_x\":3,\"size_y\":4,\"type\":\"visualization\"},{\"col\":1,\"columns\":[\"_source\"],\"id\":\"WMI-Events\",\"panelIndex\":2,\"row\":5,\"size_x\":12,\"size_y\":8,\"sort\":[\"@timestamp\",\"desc\"],\"type\":\"search\"},{\"id\":\"WMI-Events-By-Id\",\"type\":\"visualization\",\"panelIndex\":5,\"size_x\":3,\"size_y\":4,\"col\":10,\"row\":1}]",
      "optionsJSON": "{\"darkTheme\":false}",
      "uiStateJSON": "{}",
      "version": 1,
      "timeRestore": false,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}]}"
      }
    }
  },
  {
    "_id": "Microsoft-Antimalware-Events-Dashboard",
    "_type": "dashboard",
    "_source": {
      "title": "Microsoft Antimalware Events Dashboard",
      "hits": 0,
      "description": "",
      "panelsJSON": "[{\"col\":1,\"id\":\"Microsoft-Antimalware-Events-By-Computer\",\"panelIndex\":1,\"row\":1,\"size_x\":4,\"size_y\":4,\"type\":\"visualization\"},{\"col\":9,\"id\":\"Microsoft-Antimalware-Events-By-Id\",\"panelIndex\":2,\"row\":1,\"size_x\":4,\"size_y\":4,\"type\":\"visualization\"},{\"col\":1,\"columns\":[\"_source\"],\"id\":\"Microsoft-Antimalware-Events\",\"panelIndex\":3,\"row\":5,\"size_x\":12,\"size_y\":8,\"sort\":[\"@timestamp\",\"desc\"],\"type\":\"search\"},{\"id\":\"Microsoft-Antimalware-Events-By-Source\",\"type\":\"visualization\",\"panelIndex\":4,\"size_x\":4,\"size_y\":4,\"col\":5,\"row\":1}]",
      "optionsJSON": "{\"darkTheme\":false}",
      "uiStateJSON": "{}",
      "version": 1,
      "timeRestore": false,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}]}"
      }
    }
  },
  {
    "_id": "Production-SQL-Sentry-Events-Dashboard",
    "_type": "dashboard",
    "_source": {
      "title": "Production - SQL Sentry Events Dashboard",
      "hits": 0,
      "description": "",
      "panelsJSON": "[\n  {\n    \"col\": 1,\n    \"id\": \"Production-SQL-Sentry-Events-By-Server\",\n    \"panelIndex\": 4,\n    \"row\": 1,\n    \"size_x\": 4,\n    \"size_y\": 3,\n    \"type\": \"visualization\"\n  },\n  {\n    \"col\": 5,\n    \"id\": \"Production-SQL-Sentry-Events-By-Client-Computer\",\n    \"panelIndex\": 2,\n    \"row\": 1,\n    \"size_x\": 4,\n    \"size_y\": 3,\n    \"type\": \"visualization\"\n  },\n  {\n    \"col\": 9,\n    \"id\": \"Production-SQL-Sentry-Events-By-Database\",\n    \"panelIndex\": 3,\n    \"row\": 1,\n    \"size_x\": 4,\n    \"size_y\": 3,\n    \"type\": \"visualization\"\n  },\n  {\n    \"col\": 1,\n    \"id\": \"Production-SQL-Sentry-Events-By-Application\",\n    \"panelIndex\": 1,\n    \"row\": 4,\n    \"size_x\": 4,\n    \"size_y\": 3,\n    \"type\": \"visualization\"\n  },\n  {\n    \"col\": 5,\n    \"id\": \"Production-SQL-Sentry-Events-By-User\",\n    \"panelIndex\": 6,\n    \"row\": 4,\n    \"size_x\": 4,\n    \"size_y\": 3,\n    \"type\": \"visualization\"\n  },\n  {\n    \"col\": 9,\n    \"id\": \"Production-SQL-Sentry-Events-By-Type\",\n    \"panelIndex\": 5,\n    \"row\": 4,\n    \"size_x\": 4,\n    \"size_y\": 3,\n    \"type\": \"visualization\"\n  },\n  {\n    \"col\": 1,\n    \"id\": \"Production-SQL-Sentry-Events-Total-Database-CPU\",\n    \"panelIndex\": 8,\n    \"row\": 7,\n    \"size_x\": 4,\n    \"size_y\": 3,\n    \"type\": \"visualization\"\n  },\n  {\n    \"col\": 5,\n    \"id\": \"Production-SQL-Sentry-Events-Total-Database-Reads\",\n    \"panelIndex\": 9,\n    \"row\": 7,\n    \"size_x\": 4,\n    \"size_y\": 3,\n    \"type\": \"visualization\"\n  },\n  {\n    \"col\": 9,\n    \"id\": \"Production-SQL-Sentry-Events-Total-Database-Writes\",\n    \"panelIndex\": 10,\n    \"row\": 7,\n    \"size_x\": 4,\n    \"size_y\": 3,\n    \"type\": \"visualization\"\n  },\n  {\n    \"col\": 1,\n    \"columns\": [\n      \"_source\"\n    ],\n    \"id\": \"Production-SQL-Sentry-Events\",\n    \"panelIndex\": 7,\n    \"row\": 10,\n    \"size_x\": 12,\n    \"size_y\": 6,\n    \"sort\": [\n      \"eventtime\",\n      \"desc\"\n    ],\n    \"type\": \"search\"\n  }\n]",
      "optionsJSON": "{\n  \"darkTheme\": false\n}",
      "uiStateJSON": "{}",
      "version": 1,
      "timeRestore": false,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"filter\": [\n    {\n      \"query\": {\n        \"query_string\": {\n          \"analyze_wildcard\": true,\n          \"query\": \"*\"\n        }\n      }\n    }\n  ]\n}"
      }
    }
  },
  {
    "_id": "Quality-Assurance-Business-Activity-Monitor-Events-Dashboard-(BAM)",
    "_type": "dashboard",
    "_source": {
      "title": "Quality Assurance - Business Activity Monitor Events Dashboard (BAM)",
      "hits": 0,
      "description": "",
      "panelsJSON": "[{\"id\":\"Quality-Assurance-Business-Activity-Monitor-(BAM)-Daily-Duration\",\"type\":\"visualization\",\"panelIndex\":6,\"size_x\":4,\"size_y\":4,\"col\":1,\"row\":1},{\"col\":5,\"id\":\"Quality-Assurance-Business-Activity-Monitor-(BAM)-Step-Duration\",\"panelIndex\":1,\"row\":1,\"size_x\":4,\"size_y\":4,\"type\":\"visualization\"},{\"col\":9,\"id\":\"Quality-Assurance-Business-Activity-Monitor-(BAM)-Step-Status-Summary\",\"panelIndex\":4,\"row\":1,\"size_x\":4,\"size_y\":4,\"type\":\"visualization\"},{\"col\":1,\"columns\":[\"_source\"],\"id\":\"Quality-Assurance-Business-Activity-Monitor-(BAM)-SQL-Agent-Events\",\"panelIndex\":2,\"row\":5,\"size_x\":12,\"size_y\":8,\"sort\":[\"stependtime\",\"desc\"],\"type\":\"search\"},{\"id\":\"Quality-Assurance-Business-Activity-Monitor-(BAM)-Daily-Duration\",\"type\":\"visualization\",\"panelIndex\":5,\"size_x\":3,\"size_y\":2,\"col\":1,\"row\":13}]",
      "optionsJSON": "{\"darkTheme\":false}",
      "uiStateJSON": "{}",
      "version": 1,
      "timeRestore": true,
      "timeTo": "now",
      "timeFrom": "now-7d",
      "refreshInterval": {
        "display": "Off",
        "pause": false,
        "value": 0
      },
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}]}"
      }
    }
  },
  {
    "_id": "Production-SQL-Agent-Events-Dashboard",
    "_type": "dashboard",
    "_source": {
      "title": "Production - SQL Agent Events Dashboard",
      "hits": 0,
      "description": "",
      "panelsJSON": "[{\"id\":\"Production-SQL-Server-Agent-Total-Duration-Per-Job-Per-Day\",\"type\":\"visualization\",\"panelIndex\":5,\"size_x\":3,\"size_y\":4,\"col\":1,\"row\":1},{\"col\":4,\"id\":\"Production-SQL-Server-Agent-Step-By-Status\",\"panelIndex\":1,\"row\":1,\"size_x\":3,\"size_y\":4,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Production-SQL-Server-Agent-Events-By-Job\",\"panelIndex\":3,\"row\":1,\"size_x\":3,\"size_y\":4,\"type\":\"visualization\"},{\"col\":10,\"id\":\"Production-SQL-Server-Agent-Events-By-Step\",\"panelIndex\":4,\"row\":1,\"size_x\":3,\"size_y\":4,\"type\":\"visualization\"},{\"col\":1,\"columns\":[\"_source\"],\"id\":\"Production-SQL-Agent-Events\",\"panelIndex\":2,\"row\":5,\"size_x\":12,\"size_y\":8,\"sort\":[\"stependtime\",\"desc\"],\"type\":\"search\"}]",
      "optionsJSON": "{\"darkTheme\":false}",
      "uiStateJSON": "{}",
      "version": 1,
      "timeRestore": true,
      "timeTo": "now",
      "timeFrom": "now-7d",
      "refreshInterval": {
        "display": "Off",
        "pause": false,
        "value": 0
      },
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}]}"
      }
    }
  },
  {
    "_id": "Quality-Assurance-Business-Activity-Monitor-Events-Dashboard",
    "_type": "dashboard",
    "_source": {
      "title": "Quality Assurance - Business Activity Monitor Events Dashboard (BAM)",
      "hits": 0,
      "description": "",
      "panelsJSON": "[\n  {\n    \"col\": 5,\n    \"id\": \"Quality-Assurance-Business-Activity-Monitor-(BAM)-Step-Duration\",\n    \"panelIndex\": 1,\n    \"row\": 1,\n    \"size_x\": 4,\n    \"size_y\": 4,\n    \"type\": \"visualization\"\n  },\n  {\n    \"col\": 9,\n    \"id\": \"Quality-Assurance-Business-Activity-Monitor-(BAM)-Step-Status-Summary\",\n    \"panelIndex\": 4,\n    \"row\": 1,\n    \"size_x\": 4,\n    \"size_y\": 4,\n    \"type\": \"visualization\"\n  },\n  {\n    \"col\": 1,\n    \"columns\": [\n      \"_source\"\n    ],\n    \"id\": \"Quality-Assurance-Business-Activity-Monitor-(BAM)-SQL-Agent-Events\",\n    \"panelIndex\": 2,\n    \"row\": 5,\n    \"size_x\": 12,\n    \"size_y\": 8,\n    \"sort\": [\n      \"stependtime\",\n      \"desc\"\n    ],\n    \"type\": \"search\"\n  },\n  {\n    \"id\": \"Quality-Assurance-Business-Activity-Monitor-(BAM)-Daily-Duration\",\n    \"type\": \"visualization\",\n    \"panelIndex\": 5,\n    \"size_x\": 3,\n    \"size_y\": 2,\n    \"col\": 1,\n    \"row\": 13\n  },\n  {\n    \"id\": \"Quality-Assurance-Business-Activity-Monitor-(BAM)-Daily-Duration\",\n    \"type\": \"visualization\",\n    \"panelIndex\": 6,\n    \"size_x\": 4,\n    \"size_y\": 4,\n    \"col\": 1,\n    \"row\": 1\n  }\n]",
      "optionsJSON": "{\n  \"darkTheme\": false\n}",
      "uiStateJSON": "{}",
      "version": 1,
      "timeRestore": false,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"filter\": [\n    {\n      \"query\": {\n        \"query_string\": {\n          \"analyze_wildcard\": true,\n          \"query\": \"*\"\n        }\n      }\n    }\n  ]\n}"
      }
    }
  },
  {
    "_id": "Production-Business-Activity-Monitor-Events-Dashboard-(BAM)",
    "_type": "dashboard",
    "_source": {
      "title": "Production - Business Activity Monitor Events Dashboard (BAM)",
      "hits": 0,
      "description": "",
      "panelsJSON": "[\n  {\n    \"id\": \"Production-Business-Activity-Monitor-(BAM)-Daily-Duration\",\n    \"type\": \"visualization\",\n    \"panelIndex\": 6,\n    \"size_x\": 4,\n    \"size_y\": 4,\n    \"col\": 1,\n    \"row\": 1\n  },\n  {\n    \"col\": 5,\n    \"id\": \"Production-Business-Activity-Monitor-(BAM)-Step-Duration\",\n    \"panelIndex\": 1,\n    \"row\": 1,\n    \"size_x\": 4,\n    \"size_y\": 4,\n    \"type\": \"visualization\"\n  },\n  {\n    \"col\": 9,\n    \"id\": \"Production-Business-Activity-Monitor-(BAM)-Step-Status-Summary\",\n    \"panelIndex\": 4,\n    \"row\": 1,\n    \"size_x\": 4,\n    \"size_y\": 4,\n    \"type\": \"visualization\"\n  },\n  {\n    \"col\": 1,\n    \"columns\": [\n      \"_source\"\n    ],\n    \"id\": \"Production-Business-Activity-Monitor-(BAM)-SQL-Agent-Events\",\n    \"panelIndex\": 2,\n    \"row\": 5,\n    \"size_x\": 12,\n    \"size_y\": 8,\n    \"sort\": [\n      \"stependtime\",\n      \"desc\"\n    ],\n    \"type\": \"search\"\n  },\n  {\n    \"id\": \"Production-Business-Activity-Monitor-(BAM)-Daily-Duration\",\n    \"type\": \"visualization\",\n    \"panelIndex\": 5,\n    \"size_x\": 3,\n    \"size_y\": 2,\n    \"col\": 1,\n    \"row\": 13\n  }\n]",
      "optionsJSON": "{\n  \"darkTheme\": false\n}",
      "uiStateJSON": "{}",
      "version": 1,
      "timeRestore": false,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"filter\": [\n    {\n      \"query\": {\n        \"query_string\": {\n          \"analyze_wildcard\": true,\n          \"query\": \"*\"\n        }\n      }\n    }\n  ]\n}"
      }
    }
  },
  {
    "_id": "Production-SCOM-APM-Events-Dashboard",
    "_type": "dashboard",
    "_source": {
      "title": "Production - SCOM APM Events Dashboard",
      "hits": 0,
      "description": "",
      "panelsJSON": "[{\"col\":1,\"id\":\"Production-SCOM-APM-Events-By-Type\",\"panelIndex\":5,\"row\":1,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":4,\"id\":\"Production-SCOM-APM-Events-By-Application\",\"panelIndex\":1,\"row\":1,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Production-SCOM-APM-Events-By-User\",\"panelIndex\":6,\"row\":1,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":10,\"id\":\"Production-SCOM-APM-Events-By-Resource\",\"panelIndex\":4,\"row\":1,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Production-SCOM-APM-Events-By-Computer\",\"panelIndex\":3,\"row\":4,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":4,\"id\":\"Production-SCOM-APM-Performance-Events-Average-Duration-By-Application\",\"panelIndex\":8,\"row\":4,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"id\":\"Production-SCOM-APM-Events-By-Aspect\",\"type\":\"visualization\",\"panelIndex\":10,\"size_x\":3,\"size_y\":3,\"col\":7,\"row\":4},{\"id\":\"Production-SCOM-APM-Events-By-Root-Function\",\"type\":\"visualization\",\"panelIndex\":9,\"size_x\":3,\"size_y\":3,\"col\":10,\"row\":4},{\"col\":1,\"columns\":[\"_source\"],\"id\":\"All-SCOM-APM-Events\",\"panelIndex\":7,\"row\":7,\"size_x\":12,\"size_y\":7,\"sort\":[\"eventtime\",\"desc\"],\"type\":\"search\"}]",
      "optionsJSON": "{\"darkTheme\":false}",
      "uiStateJSON": "{\"P-5\":{\"vis\":{\"legendOpen\":true}}}",
      "version": 1,
      "timeRestore": true,
      "timeTo": "now",
      "timeFrom": "now-7d",
      "refreshInterval": {
        "display": "Off",
        "pause": false,
        "value": 0
      },
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}]}"
      }
    }
  },
  {
    "_id": "Quality-Assurance-SQL-Sentry-Events-Dashboard",
    "_type": "dashboard",
    "_source": {
      "title": "Quality Assurance - SQL Sentry Events Dashboard",
      "hits": 0,
      "description": "",
      "panelsJSON": "[{\"col\":1,\"id\":\"Quality-Assurance-SQL-Sentry-Events-By-Server\",\"panelIndex\":4,\"row\":1,\"size_x\":4,\"size_y\":3,\"type\":\"visualization\"},{\"col\":5,\"id\":\"Quality-Assurance-SQL-Sentry-Events-By-Client-Computer\",\"panelIndex\":2,\"row\":1,\"size_x\":4,\"size_y\":3,\"type\":\"visualization\"},{\"col\":9,\"id\":\"Quality-Assurance-SQL-Sentry-Events-By-Database\",\"panelIndex\":3,\"row\":1,\"size_x\":4,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Quality-Assurance-SQL-Sentry-Events-By-Application\",\"panelIndex\":1,\"row\":4,\"size_x\":4,\"size_y\":3,\"type\":\"visualization\"},{\"col\":5,\"id\":\"Quality-Assurance-SQL-Sentry-Events-By-User\",\"panelIndex\":6,\"row\":4,\"size_x\":4,\"size_y\":3,\"type\":\"visualization\"},{\"col\":9,\"id\":\"Quality-Assurance-SQL-Sentry-Events-By-Type\",\"panelIndex\":5,\"row\":4,\"size_x\":4,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Quality-Assurance-SQL-Sentry-Events-Count-By-Query\",\"panelIndex\":11,\"row\":7,\"size_x\":3,\"size_y\":5,\"type\":\"visualization\"},{\"col\":4,\"id\":\"Quality-Assurance-SQL-Sentry-Events-Total-CPU-By-Query\",\"panelIndex\":12,\"row\":7,\"size_x\":3,\"size_y\":5,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Quality-Assurance-SQL-Sentry-Events-Total-Reads-By-Query\",\"panelIndex\":13,\"row\":7,\"size_x\":3,\"size_y\":5,\"type\":\"visualization\"},{\"col\":10,\"id\":\"Quality-Assurance-SQL-Sentry-Events-Total-Writes-By-Query\",\"panelIndex\":14,\"row\":7,\"size_x\":3,\"size_y\":5,\"type\":\"visualization\"},{\"col\":1,\"columns\":[\"_source\"],\"id\":\"Quality-Assurance-SQL-Sentry-Events\",\"panelIndex\":7,\"row\":12,\"size_x\":12,\"size_y\":6,\"sort\":[\"eventtime\",\"desc\"],\"type\":\"search\"}]",
      "optionsJSON": "{\"darkTheme\":false}",
      "uiStateJSON": "{\"P-11\":{\"vis\":{\"legendOpen\":false}},\"P-12\":{\"vis\":{\"legendOpen\":false}},\"P-13\":{\"vis\":{\"legendOpen\":false}},\"P-14\":{\"vis\":{\"legendOpen\":false}}}",
      "version": 1,
      "timeRestore": true,
      "timeTo": "now",
      "timeFrom": "now-7d",
      "refreshInterval": {
        "display": "Off",
        "pause": false,
        "value": 0
      },
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[{\"meta\":{\"index\":\"sqlsentryevents*\",\"negate\":true,\"key\":\"querytype\",\"value\":\"CDC\",\"disabled\":false,\"alias\":null},\"query\":{\"match\":{\"querytype\":{\"query\":\"CDC\",\"type\":\"phrase\"}}},\"$state\":{\"store\":\"appState\"}},{\"meta\":{\"index\":\"sqlsentryevents*\",\"negate\":true,\"key\":\"querytype\",\"value\":\"Replication\",\"disabled\":false,\"alias\":null},\"query\":{\"match\":{\"querytype\":{\"query\":\"Replication\",\"type\":\"phrase\"}}},\"$state\":{\"store\":\"appState\"}},{\"meta\":{\"index\":\"sqlsentryevents*\",\"negate\":true,\"key\":\"querytype\",\"value\":\"Maintenance\",\"disabled\":false,\"alias\":null},\"query\":{\"match\":{\"querytype\":{\"query\":\"Maintenance\",\"type\":\"phrase\"}}},\"$state\":{\"store\":\"appState\"}},{\"meta\":{\"index\":\"sqlsentryevents*\",\"negate\":true,\"key\":\"querytype\",\"value\":\"Monitoring\",\"disabled\":false,\"alias\":null},\"query\":{\"match\":{\"querytype\":{\"query\":\"Monitoring\",\"type\":\"phrase\"}}},\"$state\":{\"store\":\"appState\"}},{\"meta\":{\"index\":\"sqlsentryevents*\",\"negate\":true,\"key\":\"database\",\"value\":\"msdb\",\"disabled\":false,\"alias\":null},\"query\":{\"match\":{\"database\":{\"query\":\"msdb\",\"type\":\"phrase\"}}},\"$state\":{\"store\":\"appState\"}},{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}]}"
      }
    }
  },
  {
    "_id": "Events-Details",
    "_type": "search",
    "_source": {
      "title": "Events Details",
      "description": "",
      "hits": 0,
      "columns": [
        "computer_name",
        "log_name",
        "source_name",
        "message"
      ],
      "sort": [
        "@timestamp",
        "desc"
      ],
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"winlog*\",\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647}}"
      }
    }
  },
  {
    "_id": "Lab-Core-Infrastructure-Events",
    "_type": "search",
    "_source": {
      "title": "Lab - Core Infrastructure Events",
      "description": "",
      "hits": 0,
      "columns": [
        "computer_name",
        "log_name",
        "source_name",
        "event_id",
        "level",
        "message"
      ],
      "sort": [
        "@timestamp",
        "desc"
      ],
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"winlog*\",\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}},\"filter\":[{\"meta\":{\"negate\":false,\"index\":\"winlog*\",\"key\":\"query\",\"value\":\"{\\\"bool\\\":{\\\"must\\\":[{\\\"terms\\\":{\\\"computer_name\\\":[\\\"WIN303.contoso-qa.com\\\",\\\"WIN304.contoso-qa.com\\\"]}},{\\\"terms\\\":{\\\"log_name\\\":[\\\"System\\\",\\\"Microsoft-Windows-SMBServer/Operational\\\",\\\"Microsoft-Windows-SMBClient/Connectivity\\\",\\\"WitnessClientAdmin\\\",\\\"WitnessServiceAdmin\\\",\\\"Microsoft-Windows-FailoverClustering/Operational\\\",\\\"Microsoft-Windows-Hyper-V-Config-Admin\\\",\\\"Microsoft-Windows-Hyper-V-High-Availability-Admin\\\",\\\"Microsoft-Windows-Hyper-V-Integration-Admin\\\",\\\"Microsoft-Windows-Hyper-V-VMMS-Admin\\\",\\\"Microsoft-Windows-Hyper-V-VMMS-Networking\\\",\\\"Microsoft-Windows-Hyper-V-VMMS-Storage\\\",\\\"Microsoft-Windows-Storage-Tiering/Admin\\\",\\\"Microsoft-Windows-Deduplication/Diagnostic\\\",\\\"Microsoft-Windows-Deduplication/Operational\\\",\\\"Microsoft-Windows-Deduplication/Scrubbing\\\"]}}]}}\",\"disabled\":false,\"alias\":null},\"query\":{\"bool\":{\"must\":[{\"terms\":{\"computer_name\":[\"WIN303.contoso-qa.com\",\"WIN304.contoso-qa.com\"]}},{\"terms\":{\"log_name\":[\"System\",\"Microsoft-Windows-SMBServer/Operational\",\"Microsoft-Windows-SMBClient/Connectivity\",\"WitnessClientAdmin\",\"WitnessServiceAdmin\",\"Microsoft-Windows-FailoverClustering/Operational\",\"Microsoft-Windows-Hyper-V-Config-Admin\",\"Microsoft-Windows-Hyper-V-High-Availability-Admin\",\"Microsoft-Windows-Hyper-V-Integration-Admin\",\"Microsoft-Windows-Hyper-V-VMMS-Admin\",\"Microsoft-Windows-Hyper-V-VMMS-Networking\",\"Microsoft-Windows-Hyper-V-VMMS-Storage\",\"Microsoft-Windows-Storage-Tiering/Admin\",\"Microsoft-Windows-Deduplication/Diagnostic\",\"Microsoft-Windows-Deduplication/Operational\",\"Microsoft-Windows-Deduplication/Scrubbing\"]}}]}},\"$state\":{\"store\":\"appState\"}}],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647}}"
      }
    }
  },
  {
    "_id": "Dev-SQL-Infrastructure-Events",
    "_type": "search",
    "_source": {
      "title": "Dev - SQL Infrastructure Events",
      "description": "",
      "hits": 0,
      "columns": [
        "computer_name",
        "log_name",
        "source_name",
        "event_id",
        "level",
        "message"
      ],
      "sort": [
        "@timestamp",
        "desc"
      ],
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"winlog*\",\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"index\":\"winlog*\",\"key\":\"query\",\"negate\":false,\"value\":\"{\\\"bool\\\":{\\\"must\\\":[{\\\"terms\\\":{\\\"computer_name\\\":[\\\"srv11932.contoso.com\\\",\\\"WIN914.contoso.com\\\"]}},{\\\"terms\\\":{\\\"log_name\\\":[\\\"System\\\",\\\"Application\\\"]}}],\\\"must_not\\\":[{\\\"terms\\\":{\\\"event_id\\\":[\\\"35262\\\",\\\"8018\\\",\\\"8019\\\"]}},{\\\"terms\\\":{\\\"source_name\\\":[\\\"Microsoft-Windows-TerminalServices-Printers\\\",\\\"Microsoft-Windows-Defrag\\\",\\\"Microsoft-Windows-User Profiles Service\\\"]}}]}}\"},\"query\":{\"bool\":{\"must\":[{\"terms\":{\"computer_name\":[\"srv11932.contoso.com\",\"WIN914.contoso.com\"]}},{\"terms\":{\"log_name\":[\"System\",\"Application\"]}}],\"must_not\":[{\"terms\":{\"event_id\":[\"35262\",\"8018\",\"8019\"]}},{\"terms\":{\"source_name\":[\"Microsoft-Windows-TerminalServices-Printers\",\"Microsoft-Windows-Defrag\",\"Microsoft-Windows-User Profiles Service\"]}}]}}}],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647}}"
      }
    }
  },
  {
    "_id": "Production-DPM-Infrastructure-Events",
    "_type": "search",
    "_source": {
      "title": "Production - DPM Infrastructure Events",
      "description": "",
      "hits": 0,
      "columns": [
        "computer_name",
        "log_name",
        "source_name",
        "event_id",
        "level",
        "message"
      ],
      "sort": [
        "@timestamp",
        "desc"
      ],
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"index\": \"winlogbeat-*\",\n  \"query\": {\n    \"query_string\": {\n      \"analyze_wildcard\": true,\n      \"query\": \"*\"\n    }\n  },\n  \"filter\": [\n    {\n      \"$state\": {\n        \"store\": \"appState\"\n      },\n      \"meta\": {\n        \"alias\": null,\n        \"disabled\": false,\n        \"index\": \"winlogbeat-*\",\n        \"key\": \"query\",\n        \"negate\": false,\n        \"value\": \"{\\\"bool\\\":{\\\"must\\\":[{\\\"terms\\\":{\\\"computer_name\\\":[\\\"WIN057.contoso.com\\\"]}},{\\\"terms\\\":{\\\"log_name\\\":[\\\"System\\\",\\\"Application\\\",\\\"DPM Alerts\\\",\\\"DPM Backup Events\\\"]}}],\\\"must_not\\\":[{\\\"terms\\\":{\\\"event_id\\\":[\\\"1\\\"]}},{\\\"terms\\\":{\\\"source_name\\\":[\\\"Microsoft-Windows-TerminalServices-Printers\\\",\\\"Microsoft-Windows-Defrag\\\",\\\"Microsoft-Windows-User Profiles Service\\\"]}}]}}\"\n      },\n      \"query\": {\n        \"bool\": {\n          \"must\": [\n            {\n              \"terms\": {\n                \"computer_name\": [\n                  \"WIN057.contoso.com\"\n                ]\n              }\n            },\n            {\n              \"terms\": {\n                \"log_name\": [\n                  \"System\",\n                  \"Application\",\n                  \"DPM Alerts\",\n                  \"DPM Backup Events\"\n                ]\n              }\n            }\n          ],\n          \"must_not\": [\n            {\n              \"terms\": {\n                \"event_id\": [\n                  \"1\"\n                ]\n              }\n            },\n            {\n              \"terms\": {\n                \"source_name\": [\n                  \"Microsoft-Windows-TerminalServices-Printers\",\n                  \"Microsoft-Windows-Defrag\",\n                  \"Microsoft-Windows-User Profiles Service\"\n                ]\n              }\n            }\n          ]\n        }\n      }\n    }\n  ],\n  \"highlight\": {\n    \"pre_tags\": [\n      \"@kibana-highlighted-field@\"\n    ],\n    \"post_tags\": [\n      \"@/kibana-highlighted-field@\"\n    ],\n    \"fields\": {\n      \"*\": {}\n    },\n    \"require_field_match\": false,\n    \"fragment_size\": 2147483647\n  }\n}"
      }
    }
  },
  {
    "_id": "Production-RDS-Infrastructure-Events",
    "_type": "search",
    "_source": {
      "title": "Production - RDS Infrastructure Events",
      "description": "",
      "hits": 0,
      "columns": [
        "computer_name",
        "log_name",
        "source_name",
        "event_id",
        "level",
        "message"
      ],
      "sort": [
        "@timestamp",
        "desc"
      ],
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"index\": \"winlogbeat-*\",\n  \"query\": {\n    \"query_string\": {\n      \"analyze_wildcard\": true,\n      \"query\": \"Microsoft-Windows-TerminalServices-Gateway\"\n    }\n  },\n  \"filter\": [\n    {\n      \"$state\": {\n        \"store\": \"appState\"\n      },\n      \"meta\": {\n        \"alias\": null,\n        \"disabled\": false,\n        \"index\": \"winlogbeat-*\",\n        \"key\": \"query\",\n        \"negate\": false,\n        \"value\": \"{\\\"bool\\\":{\\\"must\\\":[{\\\"terms\\\":{\\\"computer_name\\\":[\\\"WIN811.contoso.com\\\",\\\"WIN812.contoso.com\\\",\\\"WIN964.contoso.com\\\",\\\"WIN965.contoso.com\\\",\\\"WIN966.contoso.com\\\",\\\"WIN967.contoso.com\\\",\\\"srv11787.contoso.com\\\",\\\"WIN788.contoso.com\\\",\\\"WIN790.contoso.com\\\",\\\"WIN791.contoso.com\\\",\\\"WIN342.contoso.com\\\",\\\"WIN343.contoso.com\\\"]}},{\\\"terms\\\":{\\\"log_name\\\":[\\\"System\\\",\\\"Microsoft-Windows-SMBServer/Operational\\\",\\\"Microsoft-Windows-SMBClient/Connectivity\\\",\\\"WitnessClientAdmin\\\",\\\"WitnessServiceAdmin\\\",\\\"Microsoft-Windows-FailoverClustering/Operational\\\",\\\"Microsoft-Windows-Hyper-V-Config-Admin\\\",\\\"Microsoft-Windows-Hyper-V-High-Availability-Admin\\\",\\\"Microsoft-Windows-Hyper-V-Integration-Admin\\\",\\\"Microsoft-Windows-Hyper-V-VMMS-Admin\\\",\\\"Microsoft-Windows-Hyper-V-VMMS-Networking\\\",\\\"Microsoft-Windows-TerminalServices-Gateway/Admin\\\",\\\"Microsoft-Windows-TerminalServices-Gateway/Operational\\\",\\\"Microsoft-Windows-TerminalServices-LocalSessionManager/Operational\\\",\\\"Microsoft-Windows-TerminalServices-RemoteConnectionManager/Admin\\\",\\\"Microsoft-Windows-TerminalServices-SessionBroker/Admin\\\",\\\"Microsoft-Windows-TerminalServices-SessionBroker/Operational\\\",\\\"Microsoft-Windows-TerminalServices-SessionBroker-Client/Operational\\\",\\\"Microsoft-Windows-TerminalServices-TSV-VmHostAgent/Admin\\\",\\\"Microsoft-Windows-TerminalServices-TSV-VmHostAgent/Operational\\\"]}}]}}\"\n      },\n      \"query\": {\n        \"bool\": {\n          \"must\": [\n            {\n              \"terms\": {\n                \"computer_name\": [\n                  \"WIN811.contoso.com\",\n                  \"WIN812.contoso.com\",\n                  \"WIN964.contoso.com\",\n                  \"WIN965.contoso.com\",\n                  \"WIN966.contoso.com\",\n                  \"WIN967.contoso.com\",\n                  \"srv11787.contoso.com\",\n                  \"WIN788.contoso.com\",\n                  \"WIN790.contoso.com\",\n                  \"WIN791.contoso.com\",\n                  \"WIN342.contoso.com\",\n                  \"WIN343.contoso.com\"\n                ]\n              }\n            },\n            {\n              \"terms\": {\n                \"log_name\": [\n                  \"System\",\n                  \"Microsoft-Windows-SMBServer/Operational\",\n                  \"Microsoft-Windows-SMBClient/Connectivity\",\n                  \"WitnessClientAdmin\",\n                  \"WitnessServiceAdmin\",\n                  \"Microsoft-Windows-FailoverClustering/Operational\",\n                  \"Microsoft-Windows-Hyper-V-Config-Admin\",\n                  \"Microsoft-Windows-Hyper-V-High-Availability-Admin\",\n                  \"Microsoft-Windows-Hyper-V-Integration-Admin\",\n                  \"Microsoft-Windows-Hyper-V-VMMS-Admin\",\n                  \"Microsoft-Windows-Hyper-V-VMMS-Networking\",\n                  \"Microsoft-Windows-TerminalServices-Gateway/Admin\",\n                  \"Microsoft-Windows-TerminalServices-Gateway/Operational\",\n                  \"Microsoft-Windows-TerminalServices-LocalSessionManager/Operational\",\n                  \"Microsoft-Windows-TerminalServices-RemoteConnectionManager/Admin\",\n                  \"Microsoft-Windows-TerminalServices-SessionBroker/Admin\",\n                  \"Microsoft-Windows-TerminalServices-SessionBroker/Operational\",\n                  \"Microsoft-Windows-TerminalServices-SessionBroker-Client/Operational\",\n                  \"Microsoft-Windows-TerminalServices-TSV-VmHostAgent/Admin\",\n                  \"Microsoft-Windows-TerminalServices-TSV-VmHostAgent/Operational\"\n                ]\n              }\n            }\n          ]\n        }\n      }\n    }\n  ],\n  \"highlight\": {\n    \"pre_tags\": [\n      \"@kibana-highlighted-field@\"\n    ],\n    \"post_tags\": [\n      \"@/kibana-highlighted-field@\"\n    ],\n    \"fields\": {\n      \"*\": {}\n    },\n    \"require_field_match\": false,\n    \"fragment_size\": 2147483647\n  }\n}"
      }
    }
  },
  {
    "_id": "Production-Exchange-Infrastructure-Events",
    "_type": "search",
    "_source": {
      "title": "Production - Exchange Infrastructure Events",
      "description": "",
      "hits": 0,
      "columns": [
        "computer_name",
        "log_name",
        "source_name",
        "event_id",
        "level",
        "message"
      ],
      "sort": [
        "@timestamp",
        "desc"
      ],
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"index\": \"winlogbeat-*\",\n  \"query\": {\n    \"query_string\": {\n      \"analyze_wildcard\": true,\n      \"query\": \"*\"\n    }\n  },\n  \"filter\": [\n    {\n      \"$state\": {\n        \"store\": \"appState\"\n      },\n      \"meta\": {\n        \"alias\": null,\n        \"disabled\": false,\n        \"index\": \"winlogbeat-*\",\n        \"key\": \"query\",\n        \"negate\": false,\n        \"value\": \"{\\\"bool\\\":{\\\"must\\\":[{\\\"terms\\\":{\\\"computer_name\\\":[\\\"SRV10882.contoso.com\\\",\\\"SRV10883.contoso.com\\\",\\\"WIN007.contoso.com\\\",\\\"WIN008.contoso.com\\\"]}},{\\\"terms\\\":{\\\"log_name\\\":[\\\"System\\\",\\\"Application\\\",\\\"MSExchange Management\\\",\\\"Microsoft-Exchange-Troubleshooters/Operational\\\",\\\"Microsoft-Exchange-HighAvailability/Operational\\\",\\\"Microsoft-Exchange-HighAvailability/SeedingDebug\\\"]}}],\\\"must_not\\\":[{\\\"terms\\\":{\\\"event_id\\\":[\\\"1\\\"]}},{\\\"terms\\\":{\\\"source_name\\\":[\\\"Microsoft-Windows-TerminalServices-Printers\\\",\\\"Microsoft-Windows-Defrag\\\",\\\"Microsoft-Windows-User Profiles Service\\\"]}}]}}\"\n      },\n      \"query\": {\n        \"bool\": {\n          \"must\": [\n            {\n              \"terms\": {\n                \"computer_name\": [\n                  \"SRV10882.contoso.com\",\n                  \"SRV10883.contoso.com\",\n                  \"WIN007.contoso.com\",\n                  \"WIN008.contoso.com\"\n                ]\n              }\n            },\n            {\n              \"terms\": {\n                \"log_name\": [\n                  \"System\",\n                  \"Application\",\n                  \"MSExchange Management\",\n                  \"Microsoft-Exchange-Troubleshooters/Operational\",\n                  \"Microsoft-Exchange-HighAvailability/Operational\",\n                  \"Microsoft-Exchange-HighAvailability/SeedingDebug\"\n                ]\n              }\n            }\n          ],\n          \"must_not\": [\n            {\n              \"terms\": {\n                \"event_id\": [\n                  \"1\"\n                ]\n              }\n            },\n            {\n              \"terms\": {\n                \"source_name\": [\n                  \"Microsoft-Windows-TerminalServices-Printers\",\n                  \"Microsoft-Windows-Defrag\",\n                  \"Microsoft-Windows-User Profiles Service\"\n                ]\n              }\n            }\n          ]\n        }\n      }\n    }\n  ],\n  \"highlight\": {\n    \"pre_tags\": [\n      \"@kibana-highlighted-field@\"\n    ],\n    \"post_tags\": [\n      \"@/kibana-highlighted-field@\"\n    ],\n    \"fields\": {\n      \"*\": {}\n    },\n    \"require_field_match\": false,\n    \"fragment_size\": 2147483647\n  }\n}"
      }
    }
  },
  {
    "_id": "QA-SQL-Infrastructure-Events",
    "_type": "search",
    "_source": {
      "title": "QA - SQL Infrastructure Events",
      "description": "",
      "hits": 0,
      "columns": [
        "computer_name",
        "log_name",
        "source_name",
        "event_id",
        "level",
        "message"
      ],
      "sort": [
        "@timestamp",
        "desc"
      ],
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"index\": \"winlogbeat-*\",\n  \"query\": {\n    \"query_string\": {\n      \"analyze_wildcard\": true,\n      \"query\": \"*\"\n    }\n  },\n  \"filter\": [\n    {\n      \"$state\": {\n        \"store\": \"appState\"\n      },\n      \"meta\": {\n        \"alias\": null,\n        \"disabled\": false,\n        \"index\": \"winlogbeat-*\",\n        \"key\": \"query\",\n        \"negate\": false,\n        \"value\": \"{\\\"bool\\\":{\\\"must\\\":[{\\\"terms\\\":{\\\"computer_name\\\":[\\\"WIN912.contoso.com\\\",\\\"WIN927.contoso.com\\\"]}},{\\\"terms\\\":{\\\"log_name\\\":[\\\"System\\\",\\\"Application\\\"]}}],\\\"must_not\\\":[{\\\"terms\\\":{\\\"event_id\\\":[\\\"35262\\\",\\\"8018\\\",\\\"8019\\\"]}},{\\\"terms\\\":{\\\"source_name\\\":[\\\"Microsoft-Windows-TerminalServices-Printers\\\",\\\"Microsoft-Windows-Defrag\\\",\\\"Microsoft-Windows-User Profiles Service\\\"]}}]}}\"\n      },\n      \"query\": {\n        \"bool\": {\n          \"must\": [\n            {\n              \"terms\": {\n                \"computer_name\": [\n                  \"WIN912.contoso.com\",\n                  \"WIN927.contoso.com\"\n                ]\n              }\n            },\n            {\n              \"terms\": {\n                \"log_name\": [\n                  \"System\",\n                  \"Application\"\n                ]\n              }\n            }\n          ],\n          \"must_not\": [\n            {\n              \"terms\": {\n                \"event_id\": [\n                  \"35262\",\n                  \"8018\",\n                  \"8019\"\n                ]\n              }\n            },\n            {\n              \"terms\": {\n                \"source_name\": [\n                  \"Microsoft-Windows-TerminalServices-Printers\",\n                  \"Microsoft-Windows-Defrag\",\n                  \"Microsoft-Windows-User Profiles Service\"\n                ]\n              }\n            }\n          ]\n        }\n      }\n    }\n  ],\n  \"highlight\": {\n    \"pre_tags\": [\n      \"@kibana-highlighted-field@\"\n    ],\n    \"post_tags\": [\n      \"@/kibana-highlighted-field@\"\n    ],\n    \"fields\": {\n      \"*\": {}\n    },\n    \"require_field_match\": false,\n    \"fragment_size\": 2147483647\n  }\n}"
      }
    }
  },
  {
    "_id": "Production-File-Server-Events",
    "_type": "search",
    "_source": {
      "title": "Production - File Server Events",
      "description": "",
      "hits": 0,
      "columns": [
        "computer_name",
        "log_name",
        "source_name",
        "event_id",
        "level",
        "message"
      ],
      "sort": [
        "@timestamp",
        "desc"
      ],
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"winlogbeat-*\",\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}},\"filter\":[{\"meta\":{\"negate\":false,\"index\":\"winlogbeat-*\",\"key\":\"query\",\"value\":\"{\\\"bool\\\":{\\\"must\\\":[{\\\"terms\\\":{\\\"computer_name\\\":[\\\"WIN140.contoso.com\\\",\\\"WIN141.contoso.com\\\"]}},{\\\"terms\\\":{\\\"log_name\\\":[\\\"Application\\\",\\\"System\\\",\\\"Microsoft-Windows-SMBServer/Connectivity\\\",\\\"Microsoft-Windows-SMBServer/Operational\\\",\\\"Microsoft-Windows-SMBServer/Security\\\",\\\"Microsoft-Windows-SmbClient/Connectivity\\\",\\\"Microsoft-Windows-SmbClient/Operational\\\",\\\"Microsoft-Windows-SmbClient/Security\\\",\\\"WitnessClientAdmin\\\",\\\"WitnessServiceAdmin\\\",\\\"Microsoft-Windows-FailoverClustering/Operational\\\",\\\"Microsoft-Windows-FailoverClustering/Diagnostic\\\",\\\"Microsoft-Windows-Deduplication/Diagnostic\\\",\\\"Microsoft-Windows-Deduplication/Operational\\\",\\\"Microsoft-Windows-Deduplication/Scrubbing\\\"]}}]}}\",\"disabled\":false,\"alias\":null},\"query\":{\"bool\":{\"must\":[{\"terms\":{\"computer_name\":[\"WIN140.contoso.com\",\"WIN141.contoso.com\"]}},{\"terms\":{\"log_name\":[\"Application\",\"System\",\"Microsoft-Windows-SMBServer/Connectivity\",\"Microsoft-Windows-SMBServer/Operational\",\"Microsoft-Windows-SMBServer/Security\",\"Microsoft-Windows-SmbClient/Connectivity\",\"Microsoft-Windows-SmbClient/Operational\",\"Microsoft-Windows-SmbClient/Security\",\"WitnessClientAdmin\",\"WitnessServiceAdmin\",\"Microsoft-Windows-FailoverClustering/Operational\",\"Microsoft-Windows-FailoverClustering/Diagnostic\",\"Microsoft-Windows-Deduplication/Diagnostic\",\"Microsoft-Windows-Deduplication/Operational\",\"Microsoft-Windows-Deduplication/Scrubbing\"]}}]}},\"$state\":{\"store\":\"appState\"}}],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647}}"
      }
    }
  },
  {
    "_id": "Production-SQL-Infrastructure-Events",
    "_type": "search",
    "_source": {
      "title": "Production - SQL Infrastructure Events",
      "description": "",
      "hits": 0,
      "columns": [
        "computer_name",
        "log_name",
        "source_name",
        "event_id",
        "level",
        "message"
      ],
      "sort": [
        "@timestamp",
        "desc"
      ],
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"winlogbeat-*\",\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"index\":\"winlogbeat-*\",\"key\":\"query\",\"negate\":false,\"value\":\"{\\\"bool\\\":{\\\"must\\\":[{\\\"terms\\\":{\\\"computer_name\\\":[\\\"WIN873.contoso.com\\\",\\\"srv11919.contoso.com\\\",\\\"WIN925.contoso.com\\\",\\\"WIN039.contoso.com\\\",\\\"WIN775.contoso.com\\\"]}},{\\\"terms\\\":{\\\"log_name\\\":[\\\"System\\\",\\\"Application\\\"]}}],\\\"must_not\\\":[{\\\"terms\\\":{\\\"event_id\\\":[\\\"35262\\\",\\\"8018\\\",\\\"8019\\\"]}},{\\\"terms\\\":{\\\"source_name\\\":[\\\"Microsoft-Windows-TerminalServices-Printers\\\",\\\"Microsoft-Windows-Defrag\\\",\\\"Microsoft-Windows-User Profiles Service\\\"]}}]}}\"},\"query\":{\"bool\":{\"must\":[{\"terms\":{\"computer_name\":[\"WIN873.contoso.com\",\"srv11919.contoso.com\",\"WIN925.contoso.com\",\"WIN039.contoso.com\",\"WIN775.contoso.com\"]}},{\"terms\":{\"log_name\":[\"System\",\"Application\"]}}],\"must_not\":[{\"terms\":{\"event_id\":[\"35262\",\"8018\",\"8019\"]}},{\"terms\":{\"source_name\":[\"Microsoft-Windows-TerminalServices-Printers\",\"Microsoft-Windows-Defrag\",\"Microsoft-Windows-User Profiles Service\"]}}]}}}],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647}}"
      }
    }
  },
  {
    "_id": "Production-SharePoint-Infrastructure-Events",
    "_type": "search",
    "_source": {
      "title": "Production - SharePoint Infrastructure Events",
      "description": "",
      "hits": 0,
      "columns": [
        "computer_name",
        "log_name",
        "source_name",
        "event_id",
        "level",
        "message"
      ],
      "sort": [
        "@timestamp",
        "desc"
      ],
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"winlogbeat-*\",\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"index\":\"winlogbeat-*\",\"key\":\"query\",\"negate\":false,\"value\":\"{\\\"bool\\\":{\\\"must\\\":[{\\\"terms\\\":{\\\"computer_name\\\":[\\\"WIN884.contoso.com\\\",\\\"WIN352.contoso.com\\\"]}},{\\\"terms\\\":{\\\"log_name\\\":[\\\"System\\\",\\\"Application\\\"]}}],\\\"must_not\\\":[{\\\"terms\\\":{\\\"event_id\\\":[\\\"35262\\\",\\\"8018\\\",\\\"8019\\\"]}},{\\\"terms\\\":{\\\"source_name\\\":[\\\"Microsoft-Windows-TerminalServices-Printers\\\",\\\"Microsoft-Windows-Defrag\\\",\\\"Microsoft-Windows-User Profiles Service\\\"]}}]}}\"},\"query\":{\"bool\":{\"must\":[{\"terms\":{\"computer_name\":[\"WIN884.contoso.com\",\"WIN352.contoso.com\"]}},{\"terms\":{\"log_name\":[\"System\",\"Application\"]}}],\"must_not\":[{\"terms\":{\"event_id\":[\"35262\",\"8018\",\"8019\"]}},{\"terms\":{\"source_name\":[\"Microsoft-Windows-TerminalServices-Printers\",\"Microsoft-Windows-Defrag\",\"Microsoft-Windows-User Profiles Service\"]}}]}}}],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647}}"
      }
    }
  },
  {
    "_id": "All-System-Center-Operations-Manager-Events",
    "_type": "search",
    "_source": {
      "title": "All - System Center Operations Manager Events",
      "description": "",
      "hits": 0,
      "columns": [
        "_source"
      ],
      "sort": [
        "@timestamp",
        "desc"
      ],
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"winlogbeat-*\",\"filter\":[{\"meta\":{\"negate\":false,\"index\":\"winlogbeat-*\",\"key\":\"log_name\",\"value\":\"Operations Manager\",\"disabled\":false,\"alias\":null},\"query\":{\"match\":{\"log_name\":{\"query\":\"Operations Manager\",\"type\":\"phrase\"}}},\"$state\":{\"store\":\"appState\"}}],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}}}"
      }
    }
  },
  {
    "_id": "All-Active-Directory-Events",
    "_type": "search",
    "_source": {
      "title": "All - Active Directory Events",
      "description": "",
      "hits": 0,
      "columns": [
        "computer_name",
        "log_name",
        "source_name",
        "event_id",
        "level",
        "message"
      ],
      "sort": [
        "@timestamp",
        "desc"
      ],
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"winlogbeat-*\",\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"index\":\"winlogbeat-*\",\"key\":\"query\",\"negate\":false,\"value\":\"{\\\"bool\\\":{\\\"must\\\":[{\\\"terms\\\":{\\\"computer_name\\\":[\\\"WIN157.contoso-qa.com\\\",\\\"WIN397.contoso-qa.com\\\",\\\"WIN398.contoso-qa.com\\\"]}},{\\\"terms\\\":{\\\"log_name\\\":[\\\"System\\\",\\\"Application\\\",\\\"DFS Replication\\\",\\\"Directory Service\\\",\\\"DNS Server\\\",\\\"Microsoft-Windows-DFSN-Server/Admin\\\"]}}],\\\"must_not\\\":[{\\\"terms\\\":{\\\"event_id\\\":[\\\"35262\\\",\\\"8018\\\",\\\"8019\\\"]}},{\\\"terms\\\":{\\\"source_name\\\":[\\\"Microsoft-Windows-TerminalServices-Printers\\\",\\\"Microsoft-Windows-Defrag\\\",\\\"Microsoft-Windows-User Profiles Service\\\"]}}]}}\"},\"query\":{\"bool\":{\"must\":[{\"terms\":{\"computer_name\":[\"WIN157.contoso-qa.com\",\"WIN397.contoso-qa.com\",\"WIN398.contoso-qa.com\"]}},{\"terms\":{\"log_name\":[\"System\",\"Application\",\"DFS Replication\",\"Directory Service\",\"DNS Server\",\"Microsoft-Windows-DFSN-Server/Admin\"]}}],\"must_not\":[{\"terms\":{\"event_id\":[\"35262\",\"8018\",\"8019\"]}},{\"terms\":{\"source_name\":[\"Microsoft-Windows-TerminalServices-Printers\",\"Microsoft-Windows-Defrag\",\"Microsoft-Windows-User Profiles Service\"]}}]}}}],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647}}"
      }
    }
  },
  {
    "_id": "All-SolarWinds-Events",
    "_type": "search",
    "_source": {
      "title": "All - SolarWinds Events",
      "description": "",
      "hits": 0,
      "columns": [
        "_source"
      ],
      "sort": [
        "@timestamp",
        "desc"
      ],
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"winlogbeat-*\",\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"index\":\"winlogbeat-*\",\"key\":\"log_name\",\"negate\":false,\"value\":\"SolarWinds.Net\"},\"query\":{\"match\":{\"log_name\":{\"query\":\"SolarWinds.Net\",\"type\":\"phrase\"}}}}],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}}}"
      }
    }
  },
  {
    "_id": "Production-Core-Infrastructure-Events",
    "_type": "search",
    "_source": {
      "title": "Production - Core Infrastructure Events",
      "description": "",
      "hits": 0,
      "columns": [
        "computer_name",
        "log_name",
        "source_name",
        "event_id",
        "level",
        "message"
      ],
      "sort": [
        "@timestamp",
        "desc"
      ],
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"winlogbeat-*\",\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"index\":\"winlogbeat-*\",\"key\":\"query\",\"negate\":false,\"value\":\"{\\\"bool\\\":{\\\"must\\\":[{\\\"terms\\\":{\\\"computer_name\\\":[\\\"WIN811.contoso.com\\\",\\\"WIN812.contoso.com\\\",\\\"WIN794.contoso.com\\\",\\\"WIN795.contoso.com\\\",\\\"WIN964.contoso.com\\\",\\\"WIN965.contoso.com\\\",\\\"WIN966.contoso.com\\\",\\\"WIN967.contoso.com\\\",\\\"WIN154.contoso.com\\\",\\\"WIN155.contoso.com\\\",\\\"WIN342.contoso.com\\\",\\\"WIN343.contoso.com\\\",\\\"WIN344.contoso.com\\\",\\\"WIN345.contoso.com\\\"]}},{\\\"terms\\\":{\\\"log_name\\\":[\\\"System\\\",\\\"Microsoft-Windows-SMBServer/Connectivity\\\",\\\"Microsoft-Windows-SMBServer/Operational\\\",\\\"Microsoft-Windows-SMBServer/Security\\\",\\\"Microsoft-Windows-SmbClient/Connectivity\\\",\\\"Microsoft-Windows-SmbClient/Operational\\\",\\\"Microsoft-Windows-SmbClient/Security\\\",\\\"WitnessClientAdmin\\\",\\\"WitnessServiceAdmin\\\",\\\"Microsoft-Windows-FailoverClustering/Operational\\\",\\\"Microsoft-Windows-FailoverClustering/Diagnostic\\\",\\\"Microsoft-Windows-Hyper-V-Config-Admin\\\",\\\"Microsoft-Windows-Hyper-V-High-Availability-Admin\\\",\\\"Microsoft-Windows-Hyper-V-Integration-Admin\\\",\\\"Microsoft-Windows-Hyper-V-VMMS-Admin\\\",\\\"Microsoft-Windows-Hyper-V-VMMS-Networking\\\",\\\"Microsoft-Windows-Hyper-V-VMMS-Storage\\\",\\\"Microsoft-Windows-Storage-Tiering/Admin\\\",\\\"Microsoft-Windows-Deduplication/Diagnostic\\\",\\\"Microsoft-Windows-Deduplication/Operational\\\",\\\"Microsoft-Windows-Deduplication/Scrubbing\\\"]}}],\\\"must_not\\\":[{\\\"terms\\\":{\\\"event_id\\\":[\\\"35262\\\",\\\"8018\\\",\\\"8019\\\",\\\"10028\\\",\\\"15268\\\"]}},{\\\"terms\\\":{\\\"source_name\\\":[\\\"Microsoft-Windows-TerminalServices-Printers\\\",\\\"Microsoft-Windows-Defrag\\\",\\\"Microsoft-Windows-User Profiles Service\\\"]}}]}}\"},\"query\":{\"bool\":{\"must\":[{\"terms\":{\"computer_name\":[\"WIN811.contoso.com\",\"WIN812.contoso.com\",\"WIN794.contoso.com\",\"WIN795.contoso.com\",\"WIN964.contoso.com\",\"WIN965.contoso.com\",\"WIN966.contoso.com\",\"WIN967.contoso.com\",\"WIN154.contoso.com\",\"WIN155.contoso.com\",\"WIN342.contoso.com\",\"WIN343.contoso.com\",\"WIN344.contoso.com\",\"WIN345.contoso.com\"]}},{\"terms\":{\"log_name\":[\"System\",\"Microsoft-Windows-SMBServer/Connectivity\",\"Microsoft-Windows-SMBServer/Operational\",\"Microsoft-Windows-SMBServer/Security\",\"Microsoft-Windows-SmbClient/Connectivity\",\"Microsoft-Windows-SmbClient/Operational\",\"Microsoft-Windows-SmbClient/Security\",\"WitnessClientAdmin\",\"WitnessServiceAdmin\",\"Microsoft-Windows-FailoverClustering/Operational\",\"Microsoft-Windows-FailoverClustering/Diagnostic\",\"Microsoft-Windows-Hyper-V-Config-Admin\",\"Microsoft-Windows-Hyper-V-High-Availability-Admin\",\"Microsoft-Windows-Hyper-V-Integration-Admin\",\"Microsoft-Windows-Hyper-V-VMMS-Admin\",\"Microsoft-Windows-Hyper-V-VMMS-Networking\",\"Microsoft-Windows-Hyper-V-VMMS-Storage\",\"Microsoft-Windows-Storage-Tiering/Admin\",\"Microsoft-Windows-Deduplication/Diagnostic\",\"Microsoft-Windows-Deduplication/Operational\",\"Microsoft-Windows-Deduplication/Scrubbing\"]}}],\"must_not\":[{\"terms\":{\"event_id\":[\"35262\",\"8018\",\"8019\",\"10028\",\"15268\"]}},{\"terms\":{\"source_name\":[\"Microsoft-Windows-TerminalServices-Printers\",\"Microsoft-Windows-Defrag\",\"Microsoft-Windows-User Profiles Service\"]}}]}}}],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647}}"
      }
    }
  },
  {
    "_id": "QA-Active-Directory-Events",
    "_type": "search",
    "_source": {
      "title": "QA - Active Directory Events",
      "description": "",
      "hits": 0,
      "columns": [
        "computer_name",
        "log_name",
        "source_name",
        "event_id",
        "level",
        "message"
      ],
      "sort": [
        "@timestamp",
        "desc"
      ],
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"winlogbeat-*\",\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"index\":\"winlogbeat-*\",\"key\":\"query\",\"negate\":false,\"value\":\"{\\\"bool\\\":{\\\"must\\\":[{\\\"terms\\\":{\\\"computer_name\\\":[\\\"WIN157.contoso-qa.com\\\",\\\"WIN397.contoso-qa.com\\\",\\\"WIN398.contoso-qa.com\\\"]}},{\\\"terms\\\":{\\\"log_name\\\":[\\\"System\\\",\\\"Application\\\",\\\"DFS Replication\\\",\\\"Directory Service\\\",\\\"DNS Server\\\",\\\"Microsoft-Windows-DFSN-Server/Admin\\\"]}}],\\\"must_not\\\":[{\\\"terms\\\":{\\\"event_id\\\":[\\\"35262\\\",\\\"8018\\\",\\\"8019\\\",\\\"10028\\\"]}},{\\\"terms\\\":{\\\"source_name\\\":[\\\"Microsoft-Windows-TerminalServices-Printers\\\",\\\"Microsoft-Windows-Defrag\\\",\\\"Microsoft-Windows-User Profiles Service\\\"]}}]}}\"},\"query\":{\"bool\":{\"must\":[{\"terms\":{\"computer_name\":[\"WIN157.contoso-qa.com\",\"WIN397.contoso-qa.com\",\"WIN398.contoso-qa.com\"]}},{\"terms\":{\"log_name\":[\"System\",\"Application\",\"DFS Replication\",\"Directory Service\",\"DNS Server\",\"Microsoft-Windows-DFSN-Server/Admin\"]}}],\"must_not\":[{\"terms\":{\"event_id\":[\"35262\",\"8018\",\"8019\",\"10028\"]}},{\"terms\":{\"source_name\":[\"Microsoft-Windows-TerminalServices-Printers\",\"Microsoft-Windows-Defrag\",\"Microsoft-Windows-User Profiles Service\"]}}]}}}],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647}}"
      }
    }
  },
  {
    "_id": "Production-SharePoint-ULS-Events",
    "_type": "search",
    "_source": {
      "title": "Production - SharePoint ULS Events",
      "description": "",
      "hits": 0,
      "columns": [
        "_source"
      ],
      "sort": [
        "timestamp",
        "desc"
      ],
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"sharepointuls*\",\"filter\":[{\"meta\":{\"negate\":false,\"index\":\"sharepointuls*\",\"key\":\"computername\",\"value\":\"WIN884\",\"disabled\":false,\"alias\":null},\"query\":{\"match\":{\"computername\":{\"query\":\"WIN884\",\"type\":\"phrase\"}}},\"$state\":{\"store\":\"appState\"}}],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647}}"
      }
    }
  },
  {
    "_id": "WMI-Events",
    "_type": "search",
    "_source": {
      "title": "WMI Events",
      "description": "",
      "hits": 0,
      "columns": [
        "_source"
      ],
      "sort": [
        "@timestamp",
        "desc"
      ],
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"winlogbeat-*\",\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"index\":\"winlogbeat-*\",\"key\":\"query\",\"negate\":false,\"value\":\"{\\\"bool\\\":{\\\"must\\\":[{\\\"terms\\\":{\\\"source_name\\\":[\\\"Microsoft-Windows-WMI\\\",\\\"Microsoft-Windows-WMI-Activity\\\"]}}]}}\"},\"query\":{\"bool\":{\"must\":[{\"terms\":{\"source_name\":[\"Microsoft-Windows-WMI\",\"Microsoft-Windows-WMI-Activity\"]}}]}}}],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}}}"
      }
    }
  },
  {
    "_id": "Microsoft-Antimalware-Events",
    "_type": "search",
    "_source": {
      "title": "Microsoft Antimalware Events",
      "description": "",
      "hits": 0,
      "columns": [
        "_source"
      ],
      "sort": [
        "@timestamp",
        "desc"
      ],
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"winlogbeat-*\",\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"index\":\"winlogbeat-*\",\"key\":\"query\",\"negate\":false,\"value\":\"{\\\"bool\\\":{\\\"must\\\":[{\\\"terms\\\":{\\\"source_name\\\":[\\\"Microsoft Security Client\\\",\\\"Microsoft Antimalware\\\"]}}]}}\"},\"query\":{\"bool\":{\"must\":[{\"terms\":{\"source_name\":[\"Microsoft Security Client\",\"Microsoft Antimalware\"]}}]}}}],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647}}"
      }
    }
  },
  {
    "_id": "All-SCOM-APM-Performance-Events",
    "_type": "search",
    "_source": {
      "title": "All - SCOM APM Performance Events",
      "description": "",
      "hits": 0,
      "columns": [
        "_source"
      ],
      "sort": [
        "eventtime",
        "desc"
      ],
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"opsmgrapmevents*\",\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}},\"filter\":[{\"meta\":{\"negate\":false,\"index\":\"opsmgrapmevents*\",\"key\":\"aspect\",\"value\":\"performance\",\"disabled\":false,\"alias\":null},\"query\":{\"match\":{\"aspect\":{\"query\":\"performance\",\"type\":\"phrase\"}}},\"$state\":{\"store\":\"appState\"}}],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647}}"
      }
    }
  },
  {
    "_id": "All-SCOM-APM-Events",
    "_type": "search",
    "_source": {
      "title": "All - SCOM APM Events",
      "description": "",
      "hits": 0,
      "columns": [
        "_source"
      ],
      "sort": [
        "eventtime",
        "desc"
      ],
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"opsmgrapmevents*\",\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}},\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647}}"
      }
    }
  },
  {
    "_id": "Quality-Assurance-SQL-Sentry-Events",
    "_type": "search",
    "_source": {
      "title": "Quality Assurance - SQL Sentry Events",
      "description": "",
      "hits": 0,
      "columns": [
        "_source"
      ],
      "sort": [
        "eventtime",
        "desc"
      ],
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"sqlsentryevents*\",\"filter\":[{\"meta\":{\"negate\":false,\"index\":\"sqlsentryevents*\",\"key\":\"query\",\"value\":\"{\\\"bool\\\":{\\\"must\\\":[{\\\"terms\\\":{\\\"servername\\\":[\\\"WIN932.contoso.com\\\",\\\"WIN912.contoso.com\\\",\\\"WIN927.contoso.com\\\"]}}]}}\",\"disabled\":false,\"alias\":null},\"query\":{\"bool\":{\"must\":[{\"terms\":{\"servername\":[\"WIN932.contoso.com\",\"WIN912.contoso.com\",\"WIN927.contoso.com\"]}}]}},\"$state\":{\"store\":\"appState\"}}],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}}}"
      }
    }
  },
  {
    "_id": "Production-SQL-Sentry-Events",
    "_type": "search",
    "_source": {
      "title": "Production - SQL Sentry Events",
      "description": "",
      "hits": 0,
      "columns": [
        "_source"
      ],
      "sort": [
        "eventtime",
        "desc"
      ],
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"sqlsentryevents*\",\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"index\":\"sqlsentryevents*\",\"key\":\"query\",\"negate\":false,\"value\":\"{\\\"bool\\\":{\\\"must\\\":[{\\\"terms\\\":{\\\"servername\\\":[\\\"WIN873.contoso.com\\\",\\\"WIN925.contoso.com\\\",\\\"WIN919.contoso.com\\\"]}}]}}\"},\"query\":{\"bool\":{\"must\":[{\"terms\":{\"servername\":[\"WIN873.contoso.com\",\"WIN925.contoso.com\",\"WIN919.contoso.com\"]}}]}}}],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}"
      }
    }
  },
  {
    "_id": "Production-SQL-Agent-Events",
    "_type": "search",
    "_source": {
      "title": "Production - SQL Agent Events",
      "description": "",
      "hits": 0,
      "columns": [
        "_source"
      ],
      "sort": [
        "stependtime",
        "desc"
      ],
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"sqlagentevents*\",\"filter\":[{\"meta\":{\"negate\":false,\"index\":\"sqlagentevents*\",\"key\":\"query\",\"value\":\"{\\\"bool\\\":{\\\"must\\\":[{\\\"terms\\\":{\\\"servername\\\":[\\\"WIN873\\\",\\\"WIN925\\\",\\\"WIN919\\\"]}}]}}\",\"disabled\":false,\"alias\":null},\"query\":{\"bool\":{\"must\":[{\"terms\":{\"servername\":[\"WIN873\",\"WIN925\",\"WIN919\"]}}]}},\"$state\":{\"store\":\"appState\"}}],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}}}"
      }
    }
  },
  {
    "_id": "Quality-Assurance-Business-Activity-Monitor-(BAM)-SQL-Agent-Events",
    "_type": "search",
    "_source": {
      "title": "Quality Assurance - Business Activity Monitor (BAM) SQL Agent Events",
      "description": "",
      "hits": 0,
      "columns": [
        "_source"
      ],
      "sort": [
        "stependtime",
        "desc"
      ],
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"sqlagentevents*\",\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"index\":\"sqlagentevents*\",\"key\":\"servername\",\"negate\":false,\"value\":\"WIN927\"},\"query\":{\"match\":{\"servername\":{\"query\":\"WIN927\",\"type\":\"phrase\"}}}},{\"meta\":{\"negate\":false,\"index\":\"sqlagentevents*\",\"key\":\"jobname\",\"value\":\"[BI] BAM (Business Activity Monitor)\",\"disabled\":false,\"alias\":null},\"query\":{\"match\":{\"jobname\":{\"query\":\"[BI] BAM (Business Activity Monitor)\",\"type\":\"phrase\"}}},\"$state\":{\"store\":\"appState\"}}],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"BAM\"}}}"
      }
    }
  },
  {
    "_id": "Production-Business-Activity-Monitor-(BAM)-SQL-Agent-Events",
    "_type": "search",
    "_source": {
      "title": "Production - Business Activity Monitor (BAM) SQL Agent Events",
      "description": "",
      "hits": 0,
      "columns": [
        "_source"
      ],
      "sort": [
        "stependtime",
        "desc"
      ],
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"sqlagentevents*\",\"filter\":[{\"meta\":{\"negate\":false,\"index\":\"sqlagentevents*\",\"key\":\"servername\",\"value\":\"WIN919\",\"disabled\":false,\"alias\":null},\"query\":{\"match\":{\"servername\":{\"query\":\"WIN919\",\"type\":\"phrase\"}}},\"$state\":{\"store\":\"appState\"}},{\"meta\":{\"negate\":false,\"index\":\"sqlagentevents*\",\"key\":\"jobname\",\"value\":\"[BI] Business Activity Monitor  (BAM)\",\"disabled\":false,\"alias\":null},\"query\":{\"match\":{\"jobname\":{\"query\":\"[BI] Business Activity Monitor  (BAM)\",\"type\":\"phrase\"}}},\"$state\":{\"store\":\"appState\"}}],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"query\":{\"query_string\":{\"query\":\"BAM\",\"analyze_wildcard\":true}}}"
      }
    }
  },
  {
    "_id": "Quality-Assurance-SQL-Agent-Events",
    "_type": "search",
    "_source": {
      "title": "Quality Assurance - SQL Agent Events",
      "description": "",
      "hits": 0,
      "columns": [
        "_source"
      ],
      "sort": [
        "stependtime",
        "desc"
      ],
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"sqlagentevents*\",\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"index\":\"sqlagentevents*\",\"key\":\"query\",\"negate\":false,\"value\":\"{\\\"bool\\\":{\\\"must\\\":[{\\\"terms\\\":{\\\"servername\\\":[\\\"WIN912\\\",\\\"WIN927\\\"]}}]}}\"},\"query\":{\"bool\":{\"must\":[{\"terms\":{\"servername\":[\"WIN912\",\"WIN927\"]}}]}}}],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}"
      }
    }
  },
  {
    "_id": "Number-of-Events-Over-Time-By-Event-Log",
    "_type": "visualization",
    "_source": {
      "description": "",
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"index\": \"winlogbeat-*\",\n  \"query\": {\n    \"query_string\": {\n      \"query\": \"*\",\n      \"analyze_wildcard\": true\n    }\n  },\n  \"filter\": []\n}"
      },
      "title": "Number of Events Over Time By Event Log",
      "uiStateJSON": "{}",
      "version": 1,
      "visState": "{\n  \"type\": \"histogram\",\n  \"params\": {\n    \"shareYAxis\": true,\n    \"addTooltip\": true,\n    \"addLegend\": true,\n    \"scale\": \"linear\",\n    \"mode\": \"stacked\",\n    \"times\": [],\n    \"addTimeMarker\": false,\n    \"defaultYExtents\": false,\n    \"setYExtents\": false,\n    \"yAxis\": {}\n  },\n  \"aggs\": [\n    {\n      \"id\": \"1\",\n      \"type\": \"count\",\n      \"schema\": \"metric\",\n      \"params\": {}\n    },\n    {\n      \"id\": \"2\",\n      \"type\": \"date_histogram\",\n      \"schema\": \"segment\",\n      \"params\": {\n        \"field\": \"@timestamp\",\n        \"interval\": \"auto\",\n        \"customInterval\": \"2h\",\n        \"min_doc_count\": 1,\n        \"extended_bounds\": {}\n      }\n    },\n    {\n      \"id\": \"3\",\n      \"type\": \"terms\",\n      \"schema\": \"group\",\n      \"params\": {\n        \"field\": \"log_name\",\n        \"size\": 6,\n        \"order\": \"desc\",\n        \"orderBy\": \"1\"\n      }\n    }\n  ],\n  \"listeners\": {}\n}"
    }
  },
  {
    "_id": "Number-of-Events",
    "_type": "visualization",
    "_source": {
      "description": "",
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"winlogbeat-*\",\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"filter\":[]}"
      },
      "title": "Number of Events",
      "uiStateJSON": "{}",
      "version": 1,
      "visState": "{\"type\":\"metric\",\"params\":{\"fontSize\":60},\"aggs\":[{\"id\":\"1\",\"type\":\"count\",\"schema\":\"metric\",\"params\":{}}],\"listeners\":{}}"
    }
  },
  {
    "_id": "Top-Event-IDs",
    "_type": "visualization",
    "_source": {
      "description": "",
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"index\": \"winlogbeat-*\",\n  \"query\": {\n    \"query_string\": {\n      \"query\": \"*\",\n      \"analyze_wildcard\": true\n    }\n  },\n  \"filter\": []\n}"
      },
      "title": "Top Event IDs",
      "uiStateJSON": "{}",
      "version": 1,
      "visState": "{\n  \"type\": \"table\",\n  \"params\": {\n    \"perPage\": 10,\n    \"showPartialRows\": false,\n    \"showMeticsAtAllLevels\": false\n  },\n  \"aggs\": [\n    {\n      \"id\": \"1\",\n      \"type\": \"count\",\n      \"schema\": \"metric\",\n      \"params\": {}\n    },\n    {\n      \"id\": \"2\",\n      \"type\": \"terms\",\n      \"schema\": \"bucket\",\n      \"params\": {\n        \"field\": \"event_id\",\n        \"size\": 5,\n        \"order\": \"desc\",\n        \"orderBy\": \"1\"\n      }\n    }\n  ],\n  \"listeners\": {}\n}"
    }
  },
  {
    "_id": "Event-Levels",
    "_type": "visualization",
    "_source": {
      "description": "",
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"winlogbeat-*\",\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}},\"filter\":[]}"
      },
      "title": "Event Levels",
      "uiStateJSON": "{}",
      "version": 1,
      "visState": "{\"type\":\"table\",\"params\":{\"perPage\":5,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"level\",\"exclude\":{\"pattern\":\"\\\"\\\"\"},\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}"
    }
  },
  {
    "_id": "Sources",
    "_type": "visualization",
    "_source": {
      "description": "",
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"index\": \"winlogbeat-*\",\n  \"query\": {\n    \"query_string\": {\n      \"query\": \"*\",\n      \"analyze_wildcard\": true\n    }\n  },\n  \"filter\": []\n}"
      },
      "title": "Event Sources",
      "uiStateJSON": "{}",
      "version": 1,
      "visState": "{\n  \"type\": \"pie\",\n  \"params\": {\n    \"shareYAxis\": true,\n    \"addTooltip\": true,\n    \"addLegend\": true,\n    \"isDonut\": false\n  },\n  \"aggs\": [\n    {\n      \"id\": \"1\",\n      \"type\": \"count\",\n      \"schema\": \"metric\",\n      \"params\": {}\n    },\n    {\n      \"id\": \"2\",\n      \"type\": \"terms\",\n      \"schema\": \"segment\",\n      \"params\": {\n        \"field\": \"source_name\",\n        \"exclude\": {\n          \"pattern\": \"\\\"\\\"\"\n        },\n        \"size\": 7,\n        \"order\": \"desc\",\n        \"orderBy\": \"1\"\n      }\n    }\n  ],\n  \"listeners\": {}\n}"
    }
  },
  {
    "_id": "SQL-Server-Events",
    "_type": "visualization",
    "_source": {
      "title": "SQL Server Events",
      "visState": "{\"title\":\"SQL Server Events\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"3\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"2\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"computer_name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"2\"}}],\"listeners\":{}}",
      "uiStateJSON": "{\"vis\":{\"legendOpen\":true}}",
      "description": "",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"winlog*\",\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"index\":\"winlog*\",\"key\":\"source_name\",\"negate\":false,\"value\":\"MSSQLSERVER\"},\"query\":{\"match\":{\"source_name\":{\"query\":\"MSSQLSERVER\",\"type\":\"phrase\"}}}}]}"
      }
    }
  },
  {
    "_id": "storvsc-Events",
    "_type": "visualization",
    "_source": {
      "title": "storvsc Events",
      "visState": "{\"aggs\":[{\"enabled\":true,\"id\":\"3\",\"params\":{\"customInterval\":\"2h\",\"extended_bounds\":{},\"field\":\"@timestamp\",\"interval\":\"auto\",\"min_doc_count\":1},\"schema\":\"segment\",\"type\":\"date_histogram\"},{\"enabled\":true,\"id\":\"2\",\"params\":{},\"schema\":\"metric\",\"type\":\"count\"},{\"enabled\":true,\"id\":\"4\",\"params\":{\"field\":\"computer_name\",\"order\":\"desc\",\"orderBy\":\"2\",\"size\":5},\"schema\":\"group\",\"type\":\"terms\"}],\"listeners\":{},\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"defaultYExtents\":false,\"legendPosition\":\"right\",\"mode\":\"stacked\",\"scale\":\"linear\",\"setYExtents\":false,\"shareYAxis\":true,\"times\":[],\"yAxis\":{}},\"title\":\"storvsc Events\",\"type\":\"histogram\"}",
      "uiStateJSON": "{}",
      "description": "",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"winlog*\",\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"index\":\"winlog*\",\"key\":\"source_name\",\"negate\":false,\"value\":\"storvsc\"},\"query\":{\"match\":{\"source_name\":{\"query\":\"storvsc\",\"type\":\"phrase\"}}}}]}"
      }
    }
  },
  {
    "_id": "Event-Count-By-Computer",
    "_type": "visualization",
    "_source": {
      "title": "Event Count By Computer",
      "visState": "{\"title\":\"Event Count By Computer\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"computer_name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"winlogbeat-*\",\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Event-Count-By-Level",
    "_type": "visualization",
    "_source": {
      "title": "Event Count By Level",
      "visState": "{\"title\":\"Event Count By Level\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"level\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"winlogbeat-*\",\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Lab-Core-Infrastructure-Events-By-Computer",
    "_type": "visualization",
    "_source": {
      "title": "Lab - Core Infrastructure Events By Computer",
      "visState": "{\"title\":\"Lab - Core Infrastructure Events By Computer\",\"type\":\"area\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"smoothLines\":false,\"scale\":\"linear\",\"interpolate\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"computer_name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Lab-Core-Infrastructure-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Lab-Core-Infrastructure-Events-By-Source",
    "_type": "visualization",
    "_source": {
      "title": "Lab - Core Infrastructure Events By Source",
      "visState": "{\"title\":\"Lab - Core Infrastructure Events By Source\",\"type\":\"area\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"smoothLines\":false,\"scale\":\"linear\",\"interpolate\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"h\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"source_name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Lab-Core-Infrastructure-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Lab-Core-Infrastructure-Events-By-Id",
    "_type": "visualization",
    "_source": {
      "title": "Lab - Core Infrastructure Events By Id",
      "visState": "{\"title\":\"Lab - Core Infrastructure Events By Id\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"event_id\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Lab-Core-Infrastructure-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Production-RDS-Infrastructure-Events-By-Source",
    "_type": "visualization",
    "_source": {
      "title": "Production - RDS Infrastructure Events By Source",
      "visState": "{\n  \"title\": \"Production - RDS Infrastructure Events By Source\",\n  \"type\": \"area\",\n  \"params\": {\n    \"shareYAxis\": true,\n    \"addTooltip\": true,\n    \"addLegend\": true,\n    \"legendPosition\": \"right\",\n    \"smoothLines\": false,\n    \"scale\": \"linear\",\n    \"interpolate\": \"linear\",\n    \"mode\": \"stacked\",\n    \"times\": [],\n    \"addTimeMarker\": false,\n    \"defaultYExtents\": false,\n    \"setYExtents\": false,\n    \"yAxis\": {}\n  },\n  \"aggs\": [\n    {\n      \"id\": \"1\",\n      \"enabled\": true,\n      \"type\": \"count\",\n      \"schema\": \"metric\",\n      \"params\": {}\n    },\n    {\n      \"id\": \"2\",\n      \"enabled\": true,\n      \"type\": \"date_histogram\",\n      \"schema\": \"segment\",\n      \"params\": {\n        \"field\": \"@timestamp\",\n        \"interval\": \"auto\",\n        \"customInterval\": \"2h\",\n        \"min_doc_count\": 1,\n        \"extended_bounds\": {}\n      }\n    },\n    {\n      \"id\": \"3\",\n      \"enabled\": true,\n      \"type\": \"terms\",\n      \"schema\": \"group\",\n      \"params\": {\n        \"field\": \"source_name\",\n        \"size\": 5,\n        \"order\": \"desc\",\n        \"orderBy\": \"1\"\n      }\n    }\n  ],\n  \"listeners\": {}\n}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-RDS-Infrastructure-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"filter\": []\n}"
      }
    }
  },
  {
    "_id": "Production-Core-Infrastructure-Events-By-Id",
    "_type": "visualization",
    "_source": {
      "title": "Production - Core Infrastructure Events By Id",
      "visState": "{\n  \"title\": \"Production - Core Infrastructure Events By Id\",\n  \"type\": \"histogram\",\n  \"params\": {\n    \"shareYAxis\": true,\n    \"addTooltip\": true,\n    \"addLegend\": true,\n    \"legendPosition\": \"right\",\n    \"scale\": \"linear\",\n    \"mode\": \"stacked\",\n    \"times\": [],\n    \"addTimeMarker\": false,\n    \"defaultYExtents\": false,\n    \"setYExtents\": false,\n    \"yAxis\": {}\n  },\n  \"aggs\": [\n    {\n      \"id\": \"1\",\n      \"enabled\": true,\n      \"type\": \"count\",\n      \"schema\": \"metric\",\n      \"params\": {}\n    },\n    {\n      \"id\": \"2\",\n      \"enabled\": true,\n      \"type\": \"date_histogram\",\n      \"schema\": \"segment\",\n      \"params\": {\n        \"field\": \"@timestamp\",\n        \"interval\": \"auto\",\n        \"customInterval\": \"2h\",\n        \"min_doc_count\": 1,\n        \"extended_bounds\": {}\n      }\n    },\n    {\n      \"id\": \"3\",\n      \"enabled\": true,\n      \"type\": \"terms\",\n      \"schema\": \"group\",\n      \"params\": {\n        \"field\": \"event_id\",\n        \"size\": 5,\n        \"order\": \"desc\",\n        \"orderBy\": \"1\"\n      }\n    }\n  ],\n  \"listeners\": {}\n}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-Core-Infrastructure-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"filter\": []\n}"
      }
    }
  },
  {
    "_id": "Production-RDS-Infrastructure-Events-By-Computer",
    "_type": "visualization",
    "_source": {
      "title": "Production - RDS Infrastructure Events By Computer",
      "visState": "{\n  \"title\": \"Production - RDS Infrastructure Events By Computer\",\n  \"type\": \"area\",\n  \"params\": {\n    \"addLegend\": true,\n    \"addTimeMarker\": false,\n    \"addTooltip\": true,\n    \"defaultYExtents\": false,\n    \"interpolate\": \"linear\",\n    \"legendPosition\": \"right\",\n    \"mode\": \"stacked\",\n    \"scale\": \"linear\",\n    \"setYExtents\": false,\n    \"shareYAxis\": true,\n    \"smoothLines\": false,\n    \"times\": [],\n    \"yAxis\": {}\n  },\n  \"aggs\": [\n    {\n      \"id\": \"1\",\n      \"enabled\": true,\n      \"type\": \"count\",\n      \"schema\": \"metric\",\n      \"params\": {}\n    },\n    {\n      \"id\": \"2\",\n      \"enabled\": true,\n      \"type\": \"date_histogram\",\n      \"schema\": \"segment\",\n      \"params\": {\n        \"field\": \"@timestamp\",\n        \"interval\": \"auto\",\n        \"customInterval\": \"2h\",\n        \"min_doc_count\": 1,\n        \"extended_bounds\": {}\n      }\n    },\n    {\n      \"id\": \"3\",\n      \"enabled\": true,\n      \"type\": \"terms\",\n      \"schema\": \"group\",\n      \"params\": {\n        \"field\": \"computer_name\",\n        \"size\": 5,\n        \"order\": \"desc\",\n        \"orderBy\": \"1\"\n      }\n    }\n  ],\n  \"listeners\": {}\n}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-RDS-Infrastructure-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"filter\": []\n}"
      }
    }
  },
  {
    "_id": "Dev-SQL-Infrastructure-Events-By-Source",
    "_type": "visualization",
    "_source": {
      "title": "Dev - SQL Infrastructure Events By Source",
      "visState": "{\n  \"title\": \"Dev - SQL Infrastructure Events By Source\",\n  \"type\": \"area\",\n  \"params\": {\n    \"shareYAxis\": true,\n    \"addTooltip\": true,\n    \"addLegend\": true,\n    \"legendPosition\": \"right\",\n    \"smoothLines\": false,\n    \"scale\": \"linear\",\n    \"interpolate\": \"linear\",\n    \"mode\": \"stacked\",\n    \"times\": [],\n    \"addTimeMarker\": false,\n    \"defaultYExtents\": false,\n    \"setYExtents\": false,\n    \"yAxis\": {}\n  },\n  \"aggs\": [\n    {\n      \"id\": \"1\",\n      \"enabled\": true,\n      \"type\": \"count\",\n      \"schema\": \"metric\",\n      \"params\": {}\n    },\n    {\n      \"id\": \"2\",\n      \"enabled\": true,\n      \"type\": \"date_histogram\",\n      \"schema\": \"segment\",\n      \"params\": {\n        \"field\": \"@timestamp\",\n        \"interval\": \"auto\",\n        \"customInterval\": \"2h\",\n        \"min_doc_count\": 1,\n        \"extended_bounds\": {}\n      }\n    },\n    {\n      \"id\": \"3\",\n      \"enabled\": true,\n      \"type\": \"terms\",\n      \"schema\": \"group\",\n      \"params\": {\n        \"field\": \"source_name\",\n        \"size\": 5,\n        \"order\": \"desc\",\n        \"orderBy\": \"1\"\n      }\n    }\n  ],\n  \"listeners\": {}\n}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Dev-SQL-Infrastructure-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"filter\": []\n}"
      }
    }
  },
  {
    "_id": "Production-RDS-Infrastructure-Events-By-Id",
    "_type": "visualization",
    "_source": {
      "title": "Production - RDS Infrastructure Events By Id",
      "visState": "{\n  \"title\": \"Production - RDS Infrastructure Events By Id\",\n  \"type\": \"histogram\",\n  \"params\": {\n    \"shareYAxis\": true,\n    \"addTooltip\": true,\n    \"addLegend\": true,\n    \"legendPosition\": \"right\",\n    \"scale\": \"linear\",\n    \"mode\": \"stacked\",\n    \"times\": [],\n    \"addTimeMarker\": false,\n    \"defaultYExtents\": false,\n    \"setYExtents\": false,\n    \"yAxis\": {}\n  },\n  \"aggs\": [\n    {\n      \"id\": \"1\",\n      \"enabled\": true,\n      \"type\": \"count\",\n      \"schema\": \"metric\",\n      \"params\": {}\n    },\n    {\n      \"id\": \"2\",\n      \"enabled\": true,\n      \"type\": \"date_histogram\",\n      \"schema\": \"segment\",\n      \"params\": {\n        \"field\": \"@timestamp\",\n        \"interval\": \"auto\",\n        \"customInterval\": \"2h\",\n        \"min_doc_count\": 1,\n        \"extended_bounds\": {}\n      }\n    },\n    {\n      \"id\": \"3\",\n      \"enabled\": true,\n      \"type\": \"terms\",\n      \"schema\": \"group\",\n      \"params\": {\n        \"field\": \"event_id\",\n        \"size\": 5,\n        \"order\": \"desc\",\n        \"orderBy\": \"1\"\n      }\n    }\n  ],\n  \"listeners\": {}\n}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-RDS-Infrastructure-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"filter\": []\n}"
      }
    }
  },
  {
    "_id": "Production-RDS-Infrastructure-Events-By-Level",
    "_type": "visualization",
    "_source": {
      "title": "Production - RDS Infrastructure Events By Level",
      "visState": "{\"title\":\"Production - RDS Infrastructure Events By Level\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"level\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-RDS-Infrastructure-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "QA-SQL-Infrastructure-Events-By-Computer",
    "_type": "visualization",
    "_source": {
      "title": "QA - SQL Infrastructure Events By Computer",
      "visState": "{\n  \"title\": \"QA - SQL Infrastructure Events By Computer\",\n  \"type\": \"area\",\n  \"params\": {\n    \"addLegend\": true,\n    \"addTimeMarker\": false,\n    \"addTooltip\": true,\n    \"defaultYExtents\": false,\n    \"interpolate\": \"linear\",\n    \"legendPosition\": \"right\",\n    \"mode\": \"stacked\",\n    \"scale\": \"linear\",\n    \"setYExtents\": false,\n    \"shareYAxis\": true,\n    \"smoothLines\": false,\n    \"times\": [],\n    \"yAxis\": {}\n  },\n  \"aggs\": [\n    {\n      \"id\": \"1\",\n      \"enabled\": true,\n      \"type\": \"count\",\n      \"schema\": \"metric\",\n      \"params\": {}\n    },\n    {\n      \"id\": \"2\",\n      \"enabled\": true,\n      \"type\": \"date_histogram\",\n      \"schema\": \"segment\",\n      \"params\": {\n        \"field\": \"@timestamp\",\n        \"interval\": \"auto\",\n        \"customInterval\": \"2h\",\n        \"min_doc_count\": 1,\n        \"extended_bounds\": {}\n      }\n    },\n    {\n      \"id\": \"3\",\n      \"enabled\": true,\n      \"type\": \"terms\",\n      \"schema\": \"group\",\n      \"params\": {\n        \"field\": \"computer_name\",\n        \"size\": 5,\n        \"order\": \"desc\",\n        \"orderBy\": \"1\"\n      }\n    }\n  ],\n  \"listeners\": {}\n}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "QA-SQL-Infrastructure-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"filter\": []\n}"
      }
    }
  },
  {
    "_id": "QA-SQL-Infrastructure-Events-By-Source",
    "_type": "visualization",
    "_source": {
      "title": "QA - SQL Infrastructure Events By Source",
      "visState": "{\"title\":\"QA - SQL Infrastructure Events By Source\",\"type\":\"area\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"defaultYExtents\":false,\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"mode\":\"stacked\",\"scale\":\"linear\",\"setYExtents\":false,\"shareYAxis\":true,\"smoothLines\":false,\"times\":[],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"source_name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "QA-SQL-Infrastructure-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "QA-SQL-Infrastructure-Events-By-Level",
    "_type": "visualization",
    "_source": {
      "title": "QA - SQL Infrastructure Events By Level",
      "visState": "{\n  \"title\": \"QA - SQL Infrastructure Events By Level\",\n  \"type\": \"histogram\",\n  \"params\": {\n    \"shareYAxis\": true,\n    \"addTooltip\": true,\n    \"addLegend\": true,\n    \"legendPosition\": \"right\",\n    \"scale\": \"linear\",\n    \"mode\": \"stacked\",\n    \"times\": [],\n    \"addTimeMarker\": false,\n    \"defaultYExtents\": false,\n    \"setYExtents\": false,\n    \"yAxis\": {}\n  },\n  \"aggs\": [\n    {\n      \"id\": \"1\",\n      \"enabled\": true,\n      \"type\": \"count\",\n      \"schema\": \"metric\",\n      \"params\": {}\n    },\n    {\n      \"id\": \"2\",\n      \"enabled\": true,\n      \"type\": \"date_histogram\",\n      \"schema\": \"segment\",\n      \"params\": {\n        \"field\": \"@timestamp\",\n        \"interval\": \"auto\",\n        \"customInterval\": \"2h\",\n        \"min_doc_count\": 1,\n        \"extended_bounds\": {}\n      }\n    },\n    {\n      \"id\": \"3\",\n      \"enabled\": true,\n      \"type\": \"terms\",\n      \"schema\": \"group\",\n      \"params\": {\n        \"field\": \"level\",\n        \"size\": 5,\n        \"order\": \"desc\",\n        \"orderBy\": \"1\"\n      }\n    }\n  ],\n  \"listeners\": {}\n}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "QA-SQL-Infrastructure-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"filter\": []\n}"
      }
    }
  },
  {
    "_id": "Dev-SQL-Infrastructure-Events-By-Computer",
    "_type": "visualization",
    "_source": {
      "title": "Dev - SQL Infrastructure Events By Computer",
      "visState": "{\n  \"title\": \"Dev - SQL Infrastructure Events By Computer\",\n  \"type\": \"area\",\n  \"params\": {\n    \"addLegend\": true,\n    \"addTimeMarker\": false,\n    \"addTooltip\": true,\n    \"defaultYExtents\": false,\n    \"interpolate\": \"linear\",\n    \"legendPosition\": \"right\",\n    \"mode\": \"stacked\",\n    \"scale\": \"linear\",\n    \"setYExtents\": false,\n    \"shareYAxis\": true,\n    \"smoothLines\": false,\n    \"times\": [],\n    \"yAxis\": {}\n  },\n  \"aggs\": [\n    {\n      \"id\": \"1\",\n      \"enabled\": true,\n      \"type\": \"count\",\n      \"schema\": \"metric\",\n      \"params\": {}\n    },\n    {\n      \"id\": \"2\",\n      \"enabled\": true,\n      \"type\": \"date_histogram\",\n      \"schema\": \"segment\",\n      \"params\": {\n        \"field\": \"@timestamp\",\n        \"interval\": \"auto\",\n        \"customInterval\": \"2h\",\n        \"min_doc_count\": 1,\n        \"extended_bounds\": {}\n      }\n    },\n    {\n      \"id\": \"3\",\n      \"enabled\": true,\n      \"type\": \"terms\",\n      \"schema\": \"group\",\n      \"params\": {\n        \"field\": \"computer_name\",\n        \"size\": 5,\n        \"order\": \"desc\",\n        \"orderBy\": \"1\"\n      }\n    }\n  ],\n  \"listeners\": {}\n}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Dev-SQL-Infrastructure-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"filter\": []\n}"
      }
    }
  },
  {
    "_id": "Dev-SQL-Infrastructure-Events-By-Level",
    "_type": "visualization",
    "_source": {
      "title": "Dev - SQL Infrastructure Events By Level",
      "visState": "{\n  \"title\": \"Dev - SQL Infrastructure Events By Level\",\n  \"type\": \"histogram\",\n  \"params\": {\n    \"shareYAxis\": true,\n    \"addTooltip\": true,\n    \"addLegend\": true,\n    \"legendPosition\": \"right\",\n    \"scale\": \"linear\",\n    \"mode\": \"stacked\",\n    \"times\": [],\n    \"addTimeMarker\": false,\n    \"defaultYExtents\": false,\n    \"setYExtents\": false,\n    \"yAxis\": {}\n  },\n  \"aggs\": [\n    {\n      \"id\": \"1\",\n      \"enabled\": true,\n      \"type\": \"count\",\n      \"schema\": \"metric\",\n      \"params\": {}\n    },\n    {\n      \"id\": \"2\",\n      \"enabled\": true,\n      \"type\": \"date_histogram\",\n      \"schema\": \"segment\",\n      \"params\": {\n        \"field\": \"@timestamp\",\n        \"interval\": \"auto\",\n        \"customInterval\": \"2h\",\n        \"min_doc_count\": 1,\n        \"extended_bounds\": {}\n      }\n    },\n    {\n      \"id\": \"3\",\n      \"enabled\": true,\n      \"type\": \"terms\",\n      \"schema\": \"group\",\n      \"params\": {\n        \"field\": \"level\",\n        \"size\": 5,\n        \"order\": \"desc\",\n        \"orderBy\": \"1\"\n      }\n    }\n  ],\n  \"listeners\": {}\n}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Dev-SQL-Infrastructure-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"filter\": []\n}"
      }
    }
  },
  {
    "_id": "Weekly-Incidents-By-Category",
    "_type": "visualization",
    "_source": {
      "title": "Weekly Incidents By Category",
      "visState": "{\"title\":\"Weekly Incidents By Category\",\"type\":\"area\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"smoothLines\":false,\"scale\":\"linear\",\"interpolate\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"category\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"dateentered\",\"interval\":\"w\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Curated-Incidents",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Incident-Trends",
    "_type": "visualization",
    "_source": {
      "title": "Incident Trends",
      "visState": "{\"title\":\"Incident Trends\",\"type\":\"line\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"showCircles\":true,\"smoothLines\":false,\"interpolate\":\"linear\",\"scale\":\"linear\",\"drawLinesBetweenPoints\":true,\"radiusRatio\":9,\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"dateentered\",\"interval\":\"d\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"category\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Curated-Incidents",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Incidents-by-Category",
    "_type": "visualization",
    "_source": {
      "title": "Incidents by Category",
      "visState": "{\"title\":\"Incidents by Category\",\"type\":\"histogram\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"defaultYExtents\":false,\"legendPosition\":\"right\",\"mode\":\"stacked\",\"scale\":\"linear\",\"setYExtents\":false,\"shareYAxis\":true,\"times\":[],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"dateentered\",\"interval\":\"M\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"category\",\"size\":20,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Curated-Incidents",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Top-Category-Per-Month",
    "_type": "visualization",
    "_source": {
      "title": "Top Category Per Month",
      "visState": "{\"title\":\"Top Category Per Month\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"dateentered\",\"interval\":\"w\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"category\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"c2*\",\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"filter\":[{\"meta\":{\"index\":\"c2*\",\"negate\":true,\"key\":\"category\",\"value\":\"Move Request\",\"disabled\":false,\"alias\":null},\"query\":{\"match\":{\"category\":{\"query\":\"Move Request\",\"type\":\"phrase\"}}},\"$state\":{\"store\":\"appState\"}},{\"meta\":{\"index\":\"c2*\",\"negate\":true,\"key\":\"category\",\"value\":\"Administrative Tasks\",\"disabled\":false,\"alias\":null},\"query\":{\"match\":{\"category\":{\"query\":\"Administrative Tasks\",\"type\":\"phrase\"}}},\"$state\":{\"store\":\"appState\"}},{\"meta\":{\"index\":\"c2*\",\"negate\":true,\"key\":\"category\",\"value\":\"Equipment Request\",\"disabled\":false,\"alias\":null},\"query\":{\"match\":{\"category\":{\"query\":\"Equipment Request\",\"type\":\"phrase\"}}},\"$state\":{\"store\":\"appState\"}},{\"meta\":{\"index\":\"c2*\",\"negate\":true,\"key\":\"category\",\"value\":\"Add/Change\",\"disabled\":false,\"alias\":null},\"query\":{\"match\":{\"category\":{\"query\":\"Add/Change\",\"type\":\"phrase\"}}},\"$state\":{\"store\":\"appState\"}},{\"meta\":{\"index\":\"c2*\",\"negate\":true,\"key\":\"category\",\"value\":\"Request Information\",\"disabled\":false,\"alias\":null},\"query\":{\"match\":{\"category\":{\"query\":\"Request Information\",\"type\":\"phrase\"}}},\"$state\":{\"store\":\"appState\"}}]}"
      }
    }
  },
  {
    "_id": "Production-SQL-Infrastructure-Events-By-Computer",
    "_type": "visualization",
    "_source": {
      "title": "Production - SQL Infrastructure Events By Computer",
      "visState": "{\n  \"title\": \"Production - SQL Infrastructure Events By Computer\",\n  \"type\": \"area\",\n  \"params\": {\n    \"addLegend\": true,\n    \"addTimeMarker\": false,\n    \"addTooltip\": true,\n    \"defaultYExtents\": false,\n    \"interpolate\": \"linear\",\n    \"legendPosition\": \"right\",\n    \"mode\": \"stacked\",\n    \"scale\": \"linear\",\n    \"setYExtents\": false,\n    \"shareYAxis\": true,\n    \"smoothLines\": false,\n    \"times\": [],\n    \"yAxis\": {}\n  },\n  \"aggs\": [\n    {\n      \"id\": \"1\",\n      \"enabled\": true,\n      \"type\": \"count\",\n      \"schema\": \"metric\",\n      \"params\": {}\n    },\n    {\n      \"id\": \"2\",\n      \"enabled\": true,\n      \"type\": \"date_histogram\",\n      \"schema\": \"segment\",\n      \"params\": {\n        \"field\": \"@timestamp\",\n        \"interval\": \"auto\",\n        \"customInterval\": \"2h\",\n        \"min_doc_count\": 1,\n        \"extended_bounds\": {}\n      }\n    },\n    {\n      \"id\": \"3\",\n      \"enabled\": true,\n      \"type\": \"terms\",\n      \"schema\": \"group\",\n      \"params\": {\n        \"field\": \"computer_name\",\n        \"size\": 5,\n        \"order\": \"desc\",\n        \"orderBy\": \"1\"\n      }\n    }\n  ],\n  \"listeners\": {}\n}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-SQL-Infrastructure-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"filter\": []\n}"
      }
    }
  },
  {
    "_id": "Production-SQL-Infrastructure-Events-By-Source",
    "_type": "visualization",
    "_source": {
      "title": "Production - SQL Infrastructure Events By Source",
      "visState": "{\n  \"title\": \"Production - SQL Infrastructure Events By Source\",\n  \"type\": \"area\",\n  \"params\": {\n    \"addLegend\": true,\n    \"addTimeMarker\": false,\n    \"addTooltip\": true,\n    \"defaultYExtents\": false,\n    \"interpolate\": \"linear\",\n    \"legendPosition\": \"right\",\n    \"mode\": \"stacked\",\n    \"scale\": \"linear\",\n    \"setYExtents\": false,\n    \"shareYAxis\": true,\n    \"smoothLines\": false,\n    \"times\": [],\n    \"yAxis\": {}\n  },\n  \"aggs\": [\n    {\n      \"id\": \"1\",\n      \"enabled\": true,\n      \"type\": \"count\",\n      \"schema\": \"metric\",\n      \"params\": {}\n    },\n    {\n      \"id\": \"2\",\n      \"enabled\": true,\n      \"type\": \"date_histogram\",\n      \"schema\": \"segment\",\n      \"params\": {\n        \"field\": \"@timestamp\",\n        \"interval\": \"auto\",\n        \"customInterval\": \"2h\",\n        \"min_doc_count\": 1,\n        \"extended_bounds\": {}\n      }\n    },\n    {\n      \"id\": \"3\",\n      \"enabled\": true,\n      \"type\": \"terms\",\n      \"schema\": \"group\",\n      \"params\": {\n        \"field\": \"source_name\",\n        \"size\": 5,\n        \"order\": \"desc\",\n        \"orderBy\": \"1\"\n      }\n    }\n  ],\n  \"listeners\": {}\n}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-SQL-Infrastructure-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"filter\": []\n}"
      }
    }
  },
  {
    "_id": "Production-SQL-Infrastructure-Events-By-Level",
    "_type": "visualization",
    "_source": {
      "title": "Production - SQL Infrastructure Events By Level",
      "visState": "{\n  \"title\": \"Production - SQL Infrastructure Events By Level\",\n  \"type\": \"histogram\",\n  \"params\": {\n    \"shareYAxis\": true,\n    \"addTooltip\": true,\n    \"addLegend\": true,\n    \"legendPosition\": \"right\",\n    \"scale\": \"linear\",\n    \"mode\": \"stacked\",\n    \"times\": [],\n    \"addTimeMarker\": false,\n    \"defaultYExtents\": false,\n    \"setYExtents\": false,\n    \"yAxis\": {}\n  },\n  \"aggs\": [\n    {\n      \"id\": \"1\",\n      \"enabled\": true,\n      \"type\": \"count\",\n      \"schema\": \"metric\",\n      \"params\": {}\n    },\n    {\n      \"id\": \"2\",\n      \"enabled\": true,\n      \"type\": \"date_histogram\",\n      \"schema\": \"segment\",\n      \"params\": {\n        \"field\": \"@timestamp\",\n        \"interval\": \"auto\",\n        \"customInterval\": \"2h\",\n        \"min_doc_count\": 1,\n        \"extended_bounds\": {}\n      }\n    },\n    {\n      \"id\": \"3\",\n      \"enabled\": true,\n      \"type\": \"terms\",\n      \"schema\": \"group\",\n      \"params\": {\n        \"field\": \"level\",\n        \"size\": 5,\n        \"order\": \"desc\",\n        \"orderBy\": \"1\"\n      }\n    }\n  ],\n  \"listeners\": {}\n}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-SQL-Infrastructure-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"filter\": []\n}"
      }
    }
  },
  {
    "_id": "Production-Exchange-Infrastructure-Events-By-Event-ID",
    "_type": "visualization",
    "_source": {
      "title": "Production - Exchange Infrastructure Events By Event ID",
      "visState": "{\"title\":\"Production - Exchange Infrastructure Events By Event ID\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"event_id\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-Exchange-Infrastructure-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Production-Exchange-Infrastructure-Events-By-Source",
    "_type": "visualization",
    "_source": {
      "title": "Production - Exchange Infrastructure Events By Source",
      "visState": "{\"title\":\"Production - Exchange Infrastructure Events By Source\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"source_name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-Exchange-Infrastructure-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Production-Exchange-Events-By-Computer",
    "_type": "visualization",
    "_source": {
      "title": "Production - Exchange Events By Computer",
      "visState": "{\"title\":\"Production - Exchange Events By Computer\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"computer_name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-Exchange-Infrastructure-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Production-DPM-Events-By-Source",
    "_type": "visualization",
    "_source": {
      "title": "Production - DPM Events By Source",
      "visState": "{\"title\":\"Production - DPM Events By Source\",\"type\":\"histogram\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"defaultYExtents\":false,\"legendPosition\":\"right\",\"mode\":\"stacked\",\"scale\":\"linear\",\"setYExtents\":false,\"shareYAxis\":true,\"times\":[],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"source_name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-DPM-Infrastructure-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Production-File-Server-Events-By-Computer",
    "_type": "visualization",
    "_source": {
      "title": "Production - File Server Events By Computer",
      "visState": "{\"title\":\"Production - File Server Events By Computer\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"computer_name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-File-Server-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Production-File-Server-Events-By-Source",
    "_type": "visualization",
    "_source": {
      "title": "Production - File Server Events By Source",
      "visState": "{\"title\":\"Production - File Server Events By Source\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"source_name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-File-Server-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Production-File-Server-Events-By-Id",
    "_type": "visualization",
    "_source": {
      "title": "Production - File Server Events By Id",
      "visState": "{\"title\":\"Production - File Server Events By Id\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"event_id\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-File-Server-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "WMI-Events-By-Computer",
    "_type": "visualization",
    "_source": {
      "title": "WMI Events By Computer",
      "visState": "{\"title\":\"WMI Events By Computer\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"computer_name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "WMI-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Production-SharePoint-Events-By-Computer",
    "_type": "visualization",
    "_source": {
      "title": "Production - SharePoint Events By Computer",
      "visState": "{\"title\":\"Production - SharePoint Events By Computer\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"computer_name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-SharePoint-Infrastructure-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Production-Core-Infrastructure-Events-By-Level",
    "_type": "visualization",
    "_source": {
      "title": "Production - Core Infrastructure Events By Level",
      "visState": "{\"title\":\"Production - Core Infrastructure Events By Level\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"level\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-Core-Infrastructure-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Production-SharePoint-Events-By-Source",
    "_type": "visualization",
    "_source": {
      "title": "Production - SharePoint Events By Source",
      "visState": "{\"title\":\"Production - SharePoint Events By Source\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"source_name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-SharePoint-Infrastructure-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Production-SharePoint-Events-By-Level",
    "_type": "visualization",
    "_source": {
      "title": "Production - SharePoint Events By Level",
      "visState": "{\"title\":\"Production - SharePoint Events By Level\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"level\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-SharePoint-Infrastructure-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Production-SharePoint-Events-By-Id",
    "_type": "visualization",
    "_source": {
      "title": "Production - SharePoint Events By Id",
      "visState": "{\"title\":\"Production - SharePoint Events By Id\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"event_id\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-SharePoint-Infrastructure-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "All-System-Center-Operations-Manager-Events-By-Computer",
    "_type": "visualization",
    "_source": {
      "title": "All - System Center Operations Manager Events By Computer",
      "visState": "{\"title\":\"All - System Center Operations Manager Events By Computer\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"computer_name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "All-System-Center-Operations-Manager-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "All-System-Center-Operations-Manager-Events-By-Source",
    "_type": "visualization",
    "_source": {
      "title": "All - System Center Operations Manager Events By Source",
      "visState": "{\"title\":\"All - System Center Operations Manager Events By Source\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"source_name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "All-System-Center-Operations-Manager-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "All-System-Center-Operations-Manager-Events-By-Health-Module",
    "_type": "visualization",
    "_source": {
      "title": "All - System Center Operations Manager Events By Health Module",
      "visState": "{\"title\":\"All - System Center Operations Manager Events By Health Module\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"event_data.param2\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "All-System-Center-Operations-Manager-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "QA-Active-Directory-Events-Per-Computer",
    "_type": "visualization",
    "_source": {
      "title": "QA - Active Directory Events Per Computer",
      "visState": "{\"title\":\"QA - Active Directory Events Per Computer\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"computer_name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "QA-Active-Directory-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "QA-Active-Directory-Events-By-Source",
    "_type": "visualization",
    "_source": {
      "title": "QA - Active Directory Events By Source",
      "visState": "{\"title\":\"QA - Active Directory Events By Source\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"source_name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "QA-Active-Directory-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "QA-Active-Directory-Events-By-Level",
    "_type": "visualization",
    "_source": {
      "title": "QA - Active Directory Events By Level",
      "visState": "{\"title\":\"QA - Active Directory Events By Level\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"level\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "QA-Active-Directory-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Production-Core-Infrastructure-Events-By-Computer",
    "_type": "visualization",
    "_source": {
      "title": "Production - Core Infrastructure Events By Computer",
      "visState": "{\n  \"title\": \"Production - Core Infrastructure Events By Computer\",\n  \"type\": \"histogram\",\n  \"params\": {\n    \"addLegend\": true,\n    \"addTimeMarker\": false,\n    \"addTooltip\": true,\n    \"defaultYExtents\": false,\n    \"interpolate\": \"linear\",\n    \"legendPosition\": \"right\",\n    \"mode\": \"stacked\",\n    \"scale\": \"linear\",\n    \"setYExtents\": false,\n    \"shareYAxis\": true,\n    \"smoothLines\": false,\n    \"times\": [],\n    \"yAxis\": {}\n  },\n  \"aggs\": [\n    {\n      \"id\": \"1\",\n      \"enabled\": true,\n      \"type\": \"count\",\n      \"schema\": \"metric\",\n      \"params\": {}\n    },\n    {\n      \"id\": \"2\",\n      \"enabled\": true,\n      \"type\": \"date_histogram\",\n      \"schema\": \"segment\",\n      \"params\": {\n        \"field\": \"@timestamp\",\n        \"interval\": \"auto\",\n        \"customInterval\": \"2h\",\n        \"min_doc_count\": 1,\n        \"extended_bounds\": {}\n      }\n    },\n    {\n      \"id\": \"3\",\n      \"enabled\": true,\n      \"type\": \"terms\",\n      \"schema\": \"group\",\n      \"params\": {\n        \"field\": \"computer_name\",\n        \"size\": 20,\n        \"order\": \"desc\",\n        \"orderBy\": \"1\"\n      }\n    }\n  ],\n  \"listeners\": {}\n}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-Core-Infrastructure-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"filter\": []\n}"
      }
    }
  },
  {
    "_id": "Production-Core-Infrastructure-Events-By-Source",
    "_type": "visualization",
    "_source": {
      "title": "Production - Core Infrastructure Events By Source",
      "visState": "{\n  \"title\": \"Production - Core Infrastructure Events By Source\",\n  \"type\": \"histogram\",\n  \"params\": {\n    \"shareYAxis\": true,\n    \"addTooltip\": true,\n    \"addLegend\": true,\n    \"legendPosition\": \"right\",\n    \"smoothLines\": false,\n    \"scale\": \"linear\",\n    \"interpolate\": \"linear\",\n    \"mode\": \"stacked\",\n    \"times\": [],\n    \"addTimeMarker\": false,\n    \"defaultYExtents\": false,\n    \"setYExtents\": false,\n    \"yAxis\": {}\n  },\n  \"aggs\": [\n    {\n      \"id\": \"1\",\n      \"enabled\": true,\n      \"type\": \"count\",\n      \"schema\": \"metric\",\n      \"params\": {}\n    },\n    {\n      \"id\": \"2\",\n      \"enabled\": true,\n      \"type\": \"date_histogram\",\n      \"schema\": \"segment\",\n      \"params\": {\n        \"field\": \"@timestamp\",\n        \"interval\": \"auto\",\n        \"customInterval\": \"2h\",\n        \"min_doc_count\": 1,\n        \"extended_bounds\": {}\n      }\n    },\n    {\n      \"id\": \"3\",\n      \"enabled\": true,\n      \"type\": \"terms\",\n      \"schema\": \"group\",\n      \"params\": {\n        \"field\": \"source_name\",\n        \"size\": 5,\n        \"order\": \"desc\",\n        \"orderBy\": \"1\"\n      }\n    }\n  ],\n  \"listeners\": {}\n}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-Core-Infrastructure-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"filter\": []\n}"
      }
    }
  },
  {
    "_id": "WMI-Events-By-Provider",
    "_type": "visualization",
    "_source": {
      "title": "WMI Events By Provider",
      "visState": "{\"title\":\"WMI Events By Provider\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"user_data.Provider\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "WMI-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "WMI-Events-By-Level",
    "_type": "visualization",
    "_source": {
      "title": "WMI Events By Level",
      "visState": "{\"title\":\"WMI Events By Level\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"level\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "WMI-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Production-SharePoint-ULS-Events-By-Computer",
    "_type": "visualization",
    "_source": {
      "title": "Production - SharePoint ULS Events By Computer",
      "visState": "{\"title\":\"Production - SharePoint ULS Events By Computer\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"computername\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-SharePoint-ULS-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Production-SharePoint-ULS-Events-By-Category",
    "_type": "visualization",
    "_source": {
      "title": "Production - SharePoint ULS Events By Category",
      "visState": "{\"title\":\"Production - SharePoint ULS Events By Category\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"category\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-SharePoint-ULS-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Production-SharePoint-ULS-Event-By-Area",
    "_type": "visualization",
    "_source": {
      "title": "Production - SharePoint ULS Event By Area",
      "visState": "{\"title\":\"Production - SharePoint ULS Event By Area\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"area\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-SharePoint-ULS-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Microsoft-Antimalware-Events-By-Id",
    "_type": "visualization",
    "_source": {
      "title": "Microsoft Antimalware Events By Id",
      "visState": "{\"title\":\"Microsoft Antimalware Events By Id\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"event_id\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Microsoft-Antimalware-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "WMI-Events-By-Id",
    "_type": "visualization",
    "_source": {
      "title": "WMI Events By Id",
      "visState": "{\"title\":\"WMI Events By Id\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"event_id\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "WMI-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Production-SCOM-APM-Events-By-Application",
    "_type": "visualization",
    "_source": {
      "title": "Production - SCOM APM Events By Application",
      "visState": "{\"title\":\"Production - SCOM APM Events By Application\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"eventtime\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"applicationname\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"opsmgrapmevents*\",\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Production-SCOM-APM-Events-By-Computer",
    "_type": "visualization",
    "_source": {
      "title": "Production - SCOM APM Events By Computer",
      "visState": "{\"title\":\"Production - SCOM APM Events By Computer\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"eventtime\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"computername\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"opsmgrapmevents*\",\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Production-SCOM-APM-Events-By-User",
    "_type": "visualization",
    "_source": {
      "title": "Production - SCOM APM Events By User",
      "visState": "{\"title\":\"Production - SCOM APM Events By User\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"eventtime\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"username\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"opsmgrapmevents*\",\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Production-SCOM-APM-Events-By-Type",
    "_type": "visualization",
    "_source": {
      "title": "Production - SCOM APM Events By Type",
      "visState": "{\"title\":\"Production - SCOM APM Events By Type\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"eventtime\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"eventtype\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"opsmgrapmevents*\",\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Microsoft-Antimalware-Events-By-Computer",
    "_type": "visualization",
    "_source": {
      "title": "Microsoft Antimalware Events By Computer",
      "visState": "{\"title\":\"Microsoft Antimalware Events By Computer\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"computer_name\",\"size\":20,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Microsoft-Antimalware-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Microsoft-Antimalware-Events-By-Source",
    "_type": "visualization",
    "_source": {
      "title": "Microsoft Antimalware Events By Source",
      "visState": "{\"title\":\"Microsoft Antimalware Events By Source\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"source_name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Microsoft-Antimalware-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Production-SCOM-APM-Performance-Events-Average-Duration-By-Application",
    "_type": "visualization",
    "_source": {
      "title": "Production - SCOM APM Performance Events Average Duration By Application",
      "visState": "{\"title\":\"Production - SCOM APM Performance Events Average Duration By Application\",\"type\":\"line\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"showCircles\":true,\"smoothLines\":false,\"interpolate\":\"linear\",\"scale\":\"linear\",\"drawLinesBetweenPoints\":true,\"radiusRatio\":9,\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"eventduration\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"eventtime\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"applicationname\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"opsmgrapmevents*\",\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Production-SCOM-APM-Events-By-Resource",
    "_type": "visualization",
    "_source": {
      "title": "Production - SCOM APM Events By Resource",
      "visState": "{\"title\":\"Production - SCOM APM Events By Resource\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"eventtime\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"resourcename\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"opsmgrapmevents*\",\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Production-SCOM-APM-Events-By-Aspect",
    "_type": "visualization",
    "_source": {
      "title": "Production - SCOM APM Events By Aspect",
      "visState": "{\"title\":\"Production - SCOM APM Events By Aspect\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"eventtime\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"aspect\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"opsmgrapmevents*\",\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Production-SCOM-APM-Events-By-Root-Function",
    "_type": "visualization",
    "_source": {
      "title": "Production - SCOM APM Events By Root Function",
      "visState": "{\"title\":\"Production - SCOM APM Events By Root Function\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"eventtime\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"rootfunction\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "All-SCOM-APM-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Quality-Assurance-SQL-Sentry-Events-By-Client-Computer",
    "_type": "visualization",
    "_source": {
      "title": "Quality Assurance - SQL Sentry Events By Client Computer",
      "visState": "{\"title\":\"Quality Assurance - SQL Sentry Events By Client Computer\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"eventtime\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"clientcomputer\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Quality-Assurance-SQL-Sentry-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Quality-Assurance-SQL-Sentry-Events-By-Application",
    "_type": "visualization",
    "_source": {
      "title": "Quality Assurance - SQL Sentry Events By Application",
      "visState": "{\"title\":\"Quality Assurance - SQL Sentry Events By Application\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"eventtime\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"application\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Quality-Assurance-SQL-Sentry-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Quality-Assurance-SQL-Sentry-Events-By-Server",
    "_type": "visualization",
    "_source": {
      "title": "Quality Assurance - SQL Sentry Events By Server",
      "visState": "{\"title\":\"Quality Assurance - SQL Sentry Events By Server\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"eventtime\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"servername\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Quality-Assurance-SQL-Sentry-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Quality-Assurance-SQL-Sentry-Events-By-Database",
    "_type": "visualization",
    "_source": {
      "title": "Quality Assurance - SQL Sentry Events By Database",
      "visState": "{\"title\":\"Quality Assurance - SQL Sentry Events By Database\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"eventtime\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"database\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Quality-Assurance-SQL-Sentry-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Quality-Assurance-SQL-Sentry-Events-By-User",
    "_type": "visualization",
    "_source": {
      "title": "Quality Assurance - SQL Sentry Events By User",
      "visState": "{\"title\":\"Quality Assurance - SQL Sentry Events By User\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"eventtime\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"username\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Quality-Assurance-SQL-Sentry-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Quality-Assurance-SQL-Sentry-Events-Database-Writes",
    "_type": "visualization",
    "_source": {
      "title": "Quality Assurance - SQL Sentry Events Database Writes",
      "visState": "{\"title\":\"Quality Assurance - SQL Sentry Events Database Writes\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"writes\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"eventtime\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"database\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Quality-Assurance-SQL-Sentry-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Quality-Assurance-SQL-Sentry-Events-Database-Reads",
    "_type": "visualization",
    "_source": {
      "title": "Quality Assurance - SQL Sentry Events Database Reads",
      "visState": "{\"title\":\"Quality Assurance - SQL Sentry Events Database Reads\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"reads\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"eventtime\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"database\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Quality-Assurance-SQL-Sentry-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Quality-Assurance-SQL-Sentry-Events-Database-CPU",
    "_type": "visualization",
    "_source": {
      "title": "Quality Assurance - SQL Sentry Events Database CPU",
      "visState": "{\"title\":\"Quality Assurance - SQL Sentry Events Database CPU\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"cpu\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"eventtime\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"database\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Quality-Assurance-SQL-Sentry-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Quality-Assurance-SQL-Sentry-Events-By-Type",
    "_type": "visualization",
    "_source": {
      "title": "Quality Assurance - SQL Sentry Events By Type",
      "visState": "{\"title\":\"Quality Assurance - SQL Sentry Events By Type\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"eventtime\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"querytype\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Quality-Assurance-SQL-Sentry-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Quality-Assurance-SQL-Sentry-Events-Total-Database-Writes",
    "_type": "visualization",
    "_source": {
      "title": "Quality Assurance - SQL Sentry Events Total Database Writes",
      "visState": "{\"title\":\"Quality Assurance - SQL Sentry Events Total Database Writes\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"writes\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"database\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Quality-Assurance-SQL-Sentry-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Quality-Assurance-SQL-Sentry-Events-Total-Database-Reads",
    "_type": "visualization",
    "_source": {
      "title": "Quality Assurance - SQL Sentry Events Total Database Reads",
      "visState": "{\"title\":\"Quality Assurance - SQL Sentry Events Total Database Reads\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"reads\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"database\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Quality-Assurance-SQL-Sentry-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Quality-Assurance-SQL-Sentry-Events-Total-Database-CPU",
    "_type": "visualization",
    "_source": {
      "title": "Quality Assurance - SQL Sentry Events Total Database CPU",
      "visState": "{\"title\":\"Quality Assurance - SQL Sentry Events Total Database CPU\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"cpu\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"database\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Quality-Assurance-SQL-Sentry-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Production-SQL-Sentry-Events-By-Client-Computer",
    "_type": "visualization",
    "_source": {
      "title": "Production - SQL Sentry Events By Client Computer",
      "visState": "{\n  \"title\": \"Production - SQL Sentry Events By Client Computer\",\n  \"type\": \"histogram\",\n  \"params\": {\n    \"shareYAxis\": true,\n    \"addTooltip\": true,\n    \"addLegend\": true,\n    \"legendPosition\": \"right\",\n    \"scale\": \"linear\",\n    \"mode\": \"stacked\",\n    \"times\": [],\n    \"addTimeMarker\": false,\n    \"defaultYExtents\": false,\n    \"setYExtents\": false,\n    \"yAxis\": {}\n  },\n  \"aggs\": [\n    {\n      \"id\": \"1\",\n      \"enabled\": true,\n      \"type\": \"count\",\n      \"schema\": \"metric\",\n      \"params\": {}\n    },\n    {\n      \"id\": \"2\",\n      \"enabled\": true,\n      \"type\": \"date_histogram\",\n      \"schema\": \"segment\",\n      \"params\": {\n        \"field\": \"eventtime\",\n        \"interval\": \"auto\",\n        \"customInterval\": \"2h\",\n        \"min_doc_count\": 1,\n        \"extended_bounds\": {}\n      }\n    },\n    {\n      \"id\": \"3\",\n      \"enabled\": true,\n      \"type\": \"terms\",\n      \"schema\": \"group\",\n      \"params\": {\n        \"field\": \"clientcomputer\",\n        \"size\": 5,\n        \"order\": \"desc\",\n        \"orderBy\": \"1\"\n      }\n    }\n  ],\n  \"listeners\": {}\n}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-SQL-Sentry-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"filter\": []\n}"
      }
    }
  },
  {
    "_id": "Production-SQL-Sentry-Events-By-Application",
    "_type": "visualization",
    "_source": {
      "title": "Production - SQL Sentry Events By Application",
      "visState": "{\n  \"title\": \"Production - SQL Sentry Events By Application\",\n  \"type\": \"histogram\",\n  \"params\": {\n    \"shareYAxis\": true,\n    \"addTooltip\": true,\n    \"addLegend\": true,\n    \"legendPosition\": \"right\",\n    \"scale\": \"linear\",\n    \"mode\": \"stacked\",\n    \"times\": [],\n    \"addTimeMarker\": false,\n    \"defaultYExtents\": false,\n    \"setYExtents\": false,\n    \"yAxis\": {}\n  },\n  \"aggs\": [\n    {\n      \"id\": \"1\",\n      \"enabled\": true,\n      \"type\": \"count\",\n      \"schema\": \"metric\",\n      \"params\": {}\n    },\n    {\n      \"id\": \"2\",\n      \"enabled\": true,\n      \"type\": \"date_histogram\",\n      \"schema\": \"segment\",\n      \"params\": {\n        \"field\": \"eventtime\",\n        \"interval\": \"auto\",\n        \"customInterval\": \"2h\",\n        \"min_doc_count\": 1,\n        \"extended_bounds\": {}\n      }\n    },\n    {\n      \"id\": \"3\",\n      \"enabled\": true,\n      \"type\": \"terms\",\n      \"schema\": \"group\",\n      \"params\": {\n        \"field\": \"application\",\n        \"size\": 5,\n        \"order\": \"desc\",\n        \"orderBy\": \"1\"\n      }\n    }\n  ],\n  \"listeners\": {}\n}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-SQL-Sentry-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"filter\": []\n}"
      }
    }
  },
  {
    "_id": "Production-SQL-Sentry-Events-By-Server",
    "_type": "visualization",
    "_source": {
      "title": "Production - SQL Sentry Events By Server",
      "visState": "{\n  \"title\": \"Production - SQL Sentry Events By Server\",\n  \"type\": \"histogram\",\n  \"params\": {\n    \"shareYAxis\": true,\n    \"addTooltip\": true,\n    \"addLegend\": true,\n    \"legendPosition\": \"right\",\n    \"scale\": \"linear\",\n    \"mode\": \"stacked\",\n    \"times\": [],\n    \"addTimeMarker\": false,\n    \"defaultYExtents\": false,\n    \"setYExtents\": false,\n    \"yAxis\": {}\n  },\n  \"aggs\": [\n    {\n      \"id\": \"1\",\n      \"enabled\": true,\n      \"type\": \"count\",\n      \"schema\": \"metric\",\n      \"params\": {}\n    },\n    {\n      \"id\": \"2\",\n      \"enabled\": true,\n      \"type\": \"date_histogram\",\n      \"schema\": \"segment\",\n      \"params\": {\n        \"field\": \"eventtime\",\n        \"interval\": \"auto\",\n        \"customInterval\": \"2h\",\n        \"min_doc_count\": 1,\n        \"extended_bounds\": {}\n      }\n    },\n    {\n      \"id\": \"3\",\n      \"enabled\": true,\n      \"type\": \"terms\",\n      \"schema\": \"group\",\n      \"params\": {\n        \"field\": \"servername\",\n        \"size\": 5,\n        \"order\": \"desc\",\n        \"orderBy\": \"1\"\n      }\n    }\n  ],\n  \"listeners\": {}\n}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-SQL-Sentry-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"filter\": []\n}"
      }
    }
  },
  {
    "_id": "Production-SQL-Sentry-Events-By-Database",
    "_type": "visualization",
    "_source": {
      "title": "Production - SQL Sentry Events By Database",
      "visState": "{\n  \"title\": \"Production - SQL Sentry Events By Database\",\n  \"type\": \"histogram\",\n  \"params\": {\n    \"shareYAxis\": true,\n    \"addTooltip\": true,\n    \"addLegend\": true,\n    \"legendPosition\": \"right\",\n    \"scale\": \"linear\",\n    \"mode\": \"stacked\",\n    \"times\": [],\n    \"addTimeMarker\": false,\n    \"defaultYExtents\": false,\n    \"setYExtents\": false,\n    \"yAxis\": {}\n  },\n  \"aggs\": [\n    {\n      \"id\": \"1\",\n      \"enabled\": true,\n      \"type\": \"count\",\n      \"schema\": \"metric\",\n      \"params\": {}\n    },\n    {\n      \"id\": \"2\",\n      \"enabled\": true,\n      \"type\": \"date_histogram\",\n      \"schema\": \"segment\",\n      \"params\": {\n        \"field\": \"eventtime\",\n        \"interval\": \"auto\",\n        \"customInterval\": \"2h\",\n        \"min_doc_count\": 1,\n        \"extended_bounds\": {}\n      }\n    },\n    {\n      \"id\": \"3\",\n      \"enabled\": true,\n      \"type\": \"terms\",\n      \"schema\": \"group\",\n      \"params\": {\n        \"field\": \"database\",\n        \"size\": 5,\n        \"order\": \"desc\",\n        \"orderBy\": \"1\"\n      }\n    }\n  ],\n  \"listeners\": {}\n}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-SQL-Sentry-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"filter\": []\n}"
      }
    }
  },
  {
    "_id": "Production-SQL-Sentry-Events-Database-Reads",
    "_type": "visualization",
    "_source": {
      "title": "Production - SQL Sentry Events Database Reads",
      "visState": "{\"title\":\"Production - SQL Sentry Events Database Reads\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"reads\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"eventtime\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"database\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Quality-Assurance-SQL-Sentry-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Production-SQL-Sentry-Events-Database-Writes",
    "_type": "visualization",
    "_source": {
      "title": "Production - SQL Sentry Events Database Writes",
      "visState": "{\n  \"title\": \"Production - SQL Sentry Events Database Writes\",\n  \"type\": \"histogram\",\n  \"params\": {\n    \"shareYAxis\": true,\n    \"addTooltip\": true,\n    \"addLegend\": true,\n    \"legendPosition\": \"right\",\n    \"scale\": \"linear\",\n    \"mode\": \"stacked\",\n    \"times\": [],\n    \"addTimeMarker\": false,\n    \"defaultYExtents\": false,\n    \"setYExtents\": false,\n    \"yAxis\": {}\n  },\n  \"aggs\": [\n    {\n      \"id\": \"1\",\n      \"enabled\": true,\n      \"type\": \"sum\",\n      \"schema\": \"metric\",\n      \"params\": {\n        \"field\": \"writes\"\n      }\n    },\n    {\n      \"id\": \"2\",\n      \"enabled\": true,\n      \"type\": \"date_histogram\",\n      \"schema\": \"segment\",\n      \"params\": {\n        \"field\": \"eventtime\",\n        \"interval\": \"auto\",\n        \"customInterval\": \"2h\",\n        \"min_doc_count\": 1,\n        \"extended_bounds\": {}\n      }\n    },\n    {\n      \"id\": \"3\",\n      \"enabled\": true,\n      \"type\": \"terms\",\n      \"schema\": \"group\",\n      \"params\": {\n        \"field\": \"database\",\n        \"size\": 5,\n        \"order\": \"desc\",\n        \"orderBy\": \"1\"\n      }\n    }\n  ],\n  \"listeners\": {}\n}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-SQL-Sentry-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"filter\": []\n}"
      }
    }
  },
  {
    "_id": "Production-SQL-Sentry-Events-Database-CPU",
    "_type": "visualization",
    "_source": {
      "title": "Production - SQL Sentry Events Database CPU",
      "visState": "{\n  \"title\": \"Production - SQL Sentry Events Database CPU\",\n  \"type\": \"histogram\",\n  \"params\": {\n    \"shareYAxis\": true,\n    \"addTooltip\": true,\n    \"addLegend\": true,\n    \"legendPosition\": \"right\",\n    \"scale\": \"linear\",\n    \"mode\": \"stacked\",\n    \"times\": [],\n    \"addTimeMarker\": false,\n    \"defaultYExtents\": false,\n    \"setYExtents\": false,\n    \"yAxis\": {}\n  },\n  \"aggs\": [\n    {\n      \"id\": \"1\",\n      \"enabled\": true,\n      \"type\": \"sum\",\n      \"schema\": \"metric\",\n      \"params\": {\n        \"field\": \"cpu\"\n      }\n    },\n    {\n      \"id\": \"2\",\n      \"enabled\": true,\n      \"type\": \"date_histogram\",\n      \"schema\": \"segment\",\n      \"params\": {\n        \"field\": \"eventtime\",\n        \"interval\": \"auto\",\n        \"customInterval\": \"2h\",\n        \"min_doc_count\": 1,\n        \"extended_bounds\": {}\n      }\n    },\n    {\n      \"id\": \"3\",\n      \"enabled\": true,\n      \"type\": \"terms\",\n      \"schema\": \"group\",\n      \"params\": {\n        \"field\": \"database\",\n        \"size\": 5,\n        \"order\": \"desc\",\n        \"orderBy\": \"1\"\n      }\n    }\n  ],\n  \"listeners\": {}\n}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-SQL-Sentry-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"filter\": []\n}"
      }
    }
  },
  {
    "_id": "Production-SQL-Sentry-Events-By-User",
    "_type": "visualization",
    "_source": {
      "title": "Production - SQL Sentry Events By User",
      "visState": "{\n  \"title\": \"Production - SQL Sentry Events By User\",\n  \"type\": \"histogram\",\n  \"params\": {\n    \"shareYAxis\": true,\n    \"addTooltip\": true,\n    \"addLegend\": true,\n    \"legendPosition\": \"right\",\n    \"scale\": \"linear\",\n    \"mode\": \"stacked\",\n    \"times\": [],\n    \"addTimeMarker\": false,\n    \"defaultYExtents\": false,\n    \"setYExtents\": false,\n    \"yAxis\": {}\n  },\n  \"aggs\": [\n    {\n      \"id\": \"1\",\n      \"enabled\": true,\n      \"type\": \"count\",\n      \"schema\": \"metric\",\n      \"params\": {}\n    },\n    {\n      \"id\": \"2\",\n      \"enabled\": true,\n      \"type\": \"date_histogram\",\n      \"schema\": \"segment\",\n      \"params\": {\n        \"field\": \"eventtime\",\n        \"interval\": \"auto\",\n        \"customInterval\": \"2h\",\n        \"min_doc_count\": 1,\n        \"extended_bounds\": {}\n      }\n    },\n    {\n      \"id\": \"3\",\n      \"enabled\": true,\n      \"type\": \"terms\",\n      \"schema\": \"group\",\n      \"params\": {\n        \"field\": \"username\",\n        \"size\": 5,\n        \"order\": \"desc\",\n        \"orderBy\": \"1\"\n      }\n    }\n  ],\n  \"listeners\": {}\n}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-SQL-Sentry-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"filter\": []\n}"
      }
    }
  },
  {
    "_id": "Production-SQL-Sentry-Events-By-Type",
    "_type": "visualization",
    "_source": {
      "title": "Production - SQL Sentry Events By Type",
      "visState": "{\n  \"title\": \"Production - SQL Sentry Events By Type\",\n  \"type\": \"histogram\",\n  \"params\": {\n    \"shareYAxis\": true,\n    \"addTooltip\": true,\n    \"addLegend\": true,\n    \"legendPosition\": \"right\",\n    \"scale\": \"linear\",\n    \"mode\": \"stacked\",\n    \"times\": [],\n    \"addTimeMarker\": false,\n    \"defaultYExtents\": false,\n    \"setYExtents\": false,\n    \"yAxis\": {}\n  },\n  \"aggs\": [\n    {\n      \"id\": \"1\",\n      \"enabled\": true,\n      \"type\": \"count\",\n      \"schema\": \"metric\",\n      \"params\": {}\n    },\n    {\n      \"id\": \"2\",\n      \"enabled\": true,\n      \"type\": \"date_histogram\",\n      \"schema\": \"segment\",\n      \"params\": {\n        \"field\": \"eventtime\",\n        \"interval\": \"auto\",\n        \"customInterval\": \"2h\",\n        \"min_doc_count\": 1,\n        \"extended_bounds\": {}\n      }\n    },\n    {\n      \"id\": \"3\",\n      \"enabled\": true,\n      \"type\": \"terms\",\n      \"schema\": \"group\",\n      \"params\": {\n        \"field\": \"querytype\",\n        \"size\": 5,\n        \"order\": \"desc\",\n        \"orderBy\": \"1\"\n      }\n    }\n  ],\n  \"listeners\": {}\n}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-SQL-Sentry-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"filter\": []\n}"
      }
    }
  },
  {
    "_id": "Production-SQL-Sentry-Events-Total-Database-Writes",
    "_type": "visualization",
    "_source": {
      "title": "Production - SQL Sentry Events Total Database Writes",
      "visState": "{\n  \"aggs\": [\n    {\n      \"enabled\": true,\n      \"id\": \"1\",\n      \"params\": {\n        \"field\": \"writes\"\n      },\n      \"schema\": \"metric\",\n      \"type\": \"sum\"\n    },\n    {\n      \"enabled\": true,\n      \"id\": \"2\",\n      \"params\": {\n        \"field\": \"database\",\n        \"order\": \"desc\",\n        \"orderBy\": \"1\",\n        \"size\": 5\n      },\n      \"schema\": \"segment\",\n      \"type\": \"terms\"\n    }\n  ],\n  \"listeners\": {},\n  \"params\": {\n    \"addLegend\": true,\n    \"addTooltip\": true,\n    \"isDonut\": false,\n    \"legendPosition\": \"right\",\n    \"shareYAxis\": true\n  },\n  \"title\": \"Production - SQL Sentry Events Total Database Writes\",\n  \"type\": \"pie\"\n}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-SQL-Sentry-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"filter\": []\n}"
      }
    }
  },
  {
    "_id": "Production-SQL-Sentry-Events-Total-Database-Reads",
    "_type": "visualization",
    "_source": {
      "title": "Production - SQL Sentry Events Total Database Reads",
      "visState": "{\n  \"title\": \"Production - SQL Sentry Events Total Database Reads\",\n  \"type\": \"pie\",\n  \"params\": {\n    \"shareYAxis\": true,\n    \"addTooltip\": true,\n    \"addLegend\": true,\n    \"legendPosition\": \"right\",\n    \"isDonut\": false\n  },\n  \"aggs\": [\n    {\n      \"id\": \"1\",\n      \"enabled\": true,\n      \"type\": \"sum\",\n      \"schema\": \"metric\",\n      \"params\": {\n        \"field\": \"reads\"\n      }\n    },\n    {\n      \"id\": \"2\",\n      \"enabled\": true,\n      \"type\": \"terms\",\n      \"schema\": \"segment\",\n      \"params\": {\n        \"field\": \"database\",\n        \"size\": 5,\n        \"order\": \"desc\",\n        \"orderBy\": \"1\"\n      }\n    }\n  ],\n  \"listeners\": {}\n}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-SQL-Sentry-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"filter\": []\n}"
      }
    }
  },
  {
    "_id": "Production-SQL-Sentry-Events-Total-Database-CPU",
    "_type": "visualization",
    "_source": {
      "title": "Production - SQL Sentry Events Total Database CPU",
      "visState": "{\n  \"title\": \"Production - SQL Sentry Events Total Database CPU\",\n  \"type\": \"pie\",\n  \"params\": {\n    \"shareYAxis\": true,\n    \"addTooltip\": true,\n    \"addLegend\": true,\n    \"legendPosition\": \"right\",\n    \"isDonut\": false\n  },\n  \"aggs\": [\n    {\n      \"id\": \"1\",\n      \"enabled\": true,\n      \"type\": \"sum\",\n      \"schema\": \"metric\",\n      \"params\": {\n        \"field\": \"cpu\"\n      }\n    },\n    {\n      \"id\": \"2\",\n      \"enabled\": true,\n      \"type\": \"terms\",\n      \"schema\": \"segment\",\n      \"params\": {\n        \"field\": \"database\",\n        \"size\": 5,\n        \"order\": \"desc\",\n        \"orderBy\": \"1\"\n      }\n    }\n  ],\n  \"listeners\": {}\n}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-SQL-Sentry-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\n  \"filter\": []\n}"
      }
    }
  },
  {
    "_id": "Production-SQL-Server-Agent-Step-By-Status",
    "_type": "visualization",
    "_source": {
      "title": "Production - SQL Server Agent Step By Status",
      "visState": "{\"title\":\"Production - SQL Server Agent Step By Status\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"3\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"stependtime\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"2\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"runstatus\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"2\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-SQL-Agent-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Production-SQL-Server-Agent-Events-By-Step",
    "_type": "visualization",
    "_source": {
      "title": "Production - SQL Server Agent Events By Step",
      "visState": "{\"title\":\"Production - SQL Server Agent Events By Step\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"stependtime\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"stepname\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-SQL-Agent-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Production-SQL-Server-Agent-Events-By-Job",
    "_type": "visualization",
    "_source": {
      "title": "Production - SQL Server Agent Events By Job",
      "visState": "{\"title\":\"Production - SQL Server Agent Events By Job\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"stependtime\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"jobname\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-SQL-Agent-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Quality-Assurance-Business-Activity-Monitor-(BAM)-Steps-By-Run-Status",
    "_type": "visualization",
    "_source": {
      "title": "Quality Assurance - Business Activity Monitor (BAM) Steps By Run Status",
      "visState": "{\"title\":\"Quality Assurance - Business Activity Monitor (BAM) Steps By Run Status\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"stependtime\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"runstatus\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Quality-Assurance-Business-Activity-Monitor-(BAM)-SQL-Agent-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Quality-Assurance-Business-Activity-Monitor-(BAM)-Daily-Duration",
    "_type": "visualization",
    "_source": {
      "title": "Quality Assurance - Business Activity Monitor (BAM) Daily Duration",
      "visState": "{\"title\":\"Quality Assurance - Business Activity Monitor (BAM) Daily Duration\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"DurationInHours\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"stependtime\",\"interval\":\"d\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"stepname\",\"size\":50,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Quality-Assurance-Business-Activity-Monitor-(BAM)-SQL-Agent-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Quality-Assurance-Business-Activity-Monitor-(BAM)-Step-Duration",
    "_type": "visualization",
    "_source": {
      "title": "Quality Assurance - Business Activity Monitor (BAM) Step Duration",
      "visState": "{\"title\":\"Quality Assurance - Business Activity Monitor (BAM) Step Duration\",\"type\":\"histogram\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"defaultYExtents\":false,\"legendPosition\":\"right\",\"mode\":\"stacked\",\"scale\":\"linear\",\"setYExtents\":false,\"shareYAxis\":true,\"times\":[],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"DurationInHours\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"stependtime\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"stepname\",\"size\":50,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Quality-Assurance-Business-Activity-Monitor-(BAM)-SQL-Agent-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Quality-Assurance-Business-Activity-Monitor-(BAM)-Step-Status-Summary",
    "_type": "visualization",
    "_source": {
      "title": "Quality Assurance - Business Activity Monitor (BAM) Step Status Summary",
      "visState": "{\"aggs\":[{\"enabled\":true,\"id\":\"1\",\"params\":{},\"schema\":\"metric\",\"type\":\"count\"},{\"enabled\":true,\"id\":\"2\",\"params\":{\"field\":\"stepname\",\"order\":\"desc\",\"orderBy\":\"1\",\"size\":50},\"schema\":\"segment\",\"type\":\"terms\"},{\"enabled\":true,\"id\":\"3\",\"params\":{\"field\":\"runstatus\",\"order\":\"desc\",\"orderBy\":\"1\",\"size\":5},\"schema\":\"group\",\"type\":\"terms\"}],\"listeners\":{},\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"defaultYExtents\":false,\"legendPosition\":\"right\",\"mode\":\"stacked\",\"scale\":\"linear\",\"setYExtents\":false,\"shareYAxis\":true,\"times\":[],\"yAxis\":{}},\"title\":\"Quality Assurance - Business Activity Monitor (BAM) Step Status Summary\",\"type\":\"histogram\"}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Quality-Assurance-Business-Activity-Monitor-(BAM)-SQL-Agent-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Quality-Assurance-Business-Activity-Monitor-(BAM)-Step-By-Status",
    "_type": "visualization",
    "_source": {
      "title": "Quality Assurance - Business Activity Monitor (BAM) Step By Status",
      "visState": "{\"title\":\"Quality Assurance - Business Activity Monitor (BAM) Step By Status\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"stepname\",\"size\":50,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"runstatus\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Quality-Assurance-Business-Activity-Monitor-(BAM)-SQL-Agent-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Quality-Assurance-SQL-Sentry-Events-Count-By-Queries-Over-Time",
    "_type": "visualization",
    "_source": {
      "title": "Quality Assurance - SQL Sentry Events Count By Queries Over Time",
      "visState": "{\"title\":\"Quality Assurance - SQL Sentry Events Count By Queries Over Time\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"eventtime\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"normalizedtextdata\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Quality-Assurance-SQL-Sentry-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Production-SQL-Server-Agent-Total-Duration-Per-Job-Per-Day",
    "_type": "visualization",
    "_source": {
      "title": "Production - SQL Server Agent Total Duration Per Job Per Day",
      "visState": "{\"title\":\"Production - SQL Server Agent Total Duration Per Job Per Day\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"DurationInHours\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"stependtime\",\"interval\":\"d\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"jobname\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-SQL-Agent-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Quality-Assurance-SQL-Sentry-Events-Total-Writes-By-Query",
    "_type": "visualization",
    "_source": {
      "title": "Quality Assurance - SQL Sentry Events Total Writes By Query",
      "visState": "{\"title\":\"Quality Assurance - SQL Sentry Events Total Writes By Query\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"top\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"writes\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"database\",\"size\":25,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"normalizedtextdata\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{\"vis\":{\"legendOpen\":false}}",
      "description": "",
      "savedSearchId": "Quality-Assurance-SQL-Sentry-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Quality-Assurance-SQL-Sentry-Events-Total-Reads-By-Query",
    "_type": "visualization",
    "_source": {
      "title": "Quality Assurance - SQL Sentry Events Total Reads By Query",
      "visState": "{\"title\":\"Quality Assurance - SQL Sentry Events Total Reads By Query\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"top\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"reads\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"database\",\"size\":25,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"normalizedtextdata\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{\"vis\":{\"legendOpen\":false}}",
      "description": "",
      "savedSearchId": "Quality-Assurance-SQL-Sentry-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Quality-Assurance-SQL-Sentry-Events-Total-CPU-By-Query",
    "_type": "visualization",
    "_source": {
      "title": "Quality Assurance - SQL Sentry Events Total CPU By Query",
      "visState": "{\"title\":\"Quality Assurance - SQL Sentry Events Total CPU By Query\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"top\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"cpu\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"database\",\"size\":25,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"normalizedtextdata\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{\"vis\":{\"legendOpen\":false}}",
      "description": "",
      "savedSearchId": "Quality-Assurance-SQL-Sentry-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Quality-Assurance-SQL-Sentry-Events-Count-By-Query",
    "_type": "visualization",
    "_source": {
      "title": "Quality Assurance - SQL Sentry Events Count By Query",
      "visState": "{\"title\":\"Quality Assurance - SQL Sentry Events Count By Query\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"top\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"database\",\"size\":25,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"normalizedtextdata\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{\"vis\":{\"legendOpen\":false}}",
      "description": "",
      "savedSearchId": "Quality-Assurance-SQL-Sentry-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Production-Business-Activity-Monitor-(BAM)-Daily-Duration",
    "_type": "visualization",
    "_source": {
      "title": "Production - Business Activity Monitor (BAM) Daily Duration",
      "visState": "{\"title\":\"Production - Business Activity Monitor (BAM) Daily Duration\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"DurationInHours\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"stependtime\",\"interval\":\"d\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"stepname\",\"size\":50,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-Business-Activity-Monitor-(BAM)-SQL-Agent-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Production-Business-Activity-Monitor-(BAM)-Step-Status-Summary",
    "_type": "visualization",
    "_source": {
      "title": "Production - Business Activity Monitor (BAM) Step Status Summary",
      "visState": "{\"aggs\":[{\"enabled\":true,\"id\":\"1\",\"params\":{},\"schema\":\"metric\",\"type\":\"count\"},{\"enabled\":true,\"id\":\"2\",\"params\":{\"field\":\"stepname\",\"order\":\"desc\",\"orderBy\":\"1\",\"size\":50},\"schema\":\"segment\",\"type\":\"terms\"},{\"enabled\":true,\"id\":\"3\",\"params\":{\"field\":\"runstatus\",\"order\":\"desc\",\"orderBy\":\"1\",\"size\":5},\"schema\":\"group\",\"type\":\"terms\"}],\"listeners\":{},\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"defaultYExtents\":false,\"legendPosition\":\"right\",\"mode\":\"stacked\",\"scale\":\"linear\",\"setYExtents\":false,\"shareYAxis\":true,\"times\":[],\"yAxis\":{}},\"title\":\"Production - Business Activity Monitor (BAM) Step Status Summary\",\"type\":\"histogram\"}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-Business-Activity-Monitor-(BAM)-SQL-Agent-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Production-Business-Activity-Monitor-(BAM)-Steps-By-Run-Status",
    "_type": "visualization",
    "_source": {
      "title": "Production - Business Activity Monitor (BAM) Steps By Run Status",
      "visState": "{\"title\":\"Production - Business Activity Monitor (BAM) Steps By Run Status\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"stependtime\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"runstatus\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-Business-Activity-Monitor-(BAM)-SQL-Agent-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Production-Business-Activity-Monitor-(BAM)-Step-Duration",
    "_type": "visualization",
    "_source": {
      "title": "Production - Business Activity Monitor (BAM) Step Duration",
      "visState": "{\"title\":\"Production - Business Activity Monitor (BAM) Step Duration\",\"type\":\"histogram\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"defaultYExtents\":false,\"legendPosition\":\"right\",\"mode\":\"stacked\",\"scale\":\"linear\",\"setYExtents\":false,\"shareYAxis\":true,\"times\":[],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"DurationInHours\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"stependtime\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"stepname\",\"size\":50,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-Business-Activity-Monitor-(BAM)-SQL-Agent-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Production-SQL-Server-Agent-Average-Step-Duration-Per-Day",
    "_type": "visualization",
    "_source": {
      "title": "Production - SQL Server Agent Average  Step Duration Per Day",
      "visState": "{\"title\":\"Production - SQL Server Agent Average  Step Duration Per Day\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"DurationInHours\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"stependtime\",\"interval\":\"d\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"stepname\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-SQL-Agent-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Production-Business-Activity-Monitor-(BAM)-Step-By-Status",
    "_type": "visualization",
    "_source": {
      "title": "Production - Business Activity Monitor (BAM) Step By Status",
      "visState": "{\"title\":\"Production - Business Activity Monitor (BAM) Step By Status\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"stepname\",\"size\":50,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"runstatus\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "savedSearchId": "Production-Business-Activity-Monitor-(BAM)-SQL-Agent-Events",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"filter\":[]}"
      }
    }
  },
  {
    "_id": "Windows-Events-By-Environment-By-System",
    "_type": "visualization",
    "_source": {
      "title": "Windows Events By Environment By System",
      "visState": "{\"title\":\"Windows Events By Environment By System\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"environment\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"primarysystemname\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}",
      "uiStateJSON": "{}",
      "description": "",
      "version": 1,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"index\":\"winlogbeat-*\",\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"filter\":[]}"
      }
    }
  }
]